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The  IETF  looks  to  plug  a  hole  in  virtual 
private  net  security  standard.  Page  8. 


BIG  BROTHER? 


Bill  Clinton  wants  the  U.S.  to  build  a  nationwide  intrusion-detection 


system  to  monitor  government  and  private-sector  networks.  Page  14. 
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AOL  changes  course,  joins  standards  effort. 


nicate  in  real  time  with  select 
individuals  who  are  also 
online. 

“An  instant  messaging  stan¬ 
dard  is  inevitable,  and  it  seems 
the  technology  has  penetrated 
the  market  to  the  point  that  a 
standard  is  necessary,”  says 
Randy  Vaughn,  an  IS  professor 
at  Baylor  University  who  uses 
instant  messaging  software  to 
communicate  with  his  stu¬ 
dents  instead  of  fielding  tele¬ 
phone  calls. 

Changing  course,  AOL  offi¬ 
cials  Friday  said  they  will  work 
closely  with  the  Internet 
Engineering  Task  Force  (IETF) 
group  developing  the  instant 
See  Messaging,  page  52 


BY  CAROLYN  DUFFY 
MARSAN 


A  move  to  get  instant  mes¬ 
saging  products  to  talk  to  one 
another  gained  momentum 
last  week  after  a  public  shout¬ 
ing  match  between  Microsoft 
and  America  Online  helped 
nudge  AOL  into  a  standards 
effort  it  had  previously 
shunned. 

Development  of  an  interop¬ 
erability  standard  would  be 
good  news  for  corporate  cus¬ 
tomers,  who  are  starting  to 
deploy  instant  messaging 
technology  in  workgroup 
environments.  Instant  messag¬ 
ing  systems  let  users  commu¬ 


Corporate  customers 
should  benefit  from  AOL’s 
decision  to  unite  with  other 
vendors  to  develop  a  stan¬ 
dard  way  for  instant  messag¬ 
ing  products  to  work  togeth¬ 
er.  Instant  messaging,  once 
considered  a  novelty,  is  gain¬ 
ing  in  popularity  as  a  corpo¬ 
rate  network  application.  A 
standard  will  enable  internal 
and  external  end  users,  even 
those  working  at  home,  to 
swap  instant  messages 
regardless  of  which  vendor's 
product  they  are  using. 


In  1988,  the  Department  of  Defense  began  an  effort 
to  boost  the  security  of  its  nonclassified  networks. 
By  1996,  the  program  had  fallen  flat,  the 
victim  of  bureaucratic  infighting.  Today,  the  JpRi| 
agency  is  launching  a  new  effort.  But  will  the 
results  be  different?  PAGE  36. 
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Where  has  all  the  cool  net  gear  gone? 


BY  JEFF  CARUSO 

Innovation  has  slowed  to  a 
crawl  in  the  enterprise  net¬ 
work  equipment  market. 

For  proof,  just  check  out  the 
kinds  of  new  companies  being 


funded  by  the  top  venture  cap¬ 
ital  firms.  Institutional  Venture 
Partners,  for  instance,  invested 
millions  of  dollars  in  four  enter¬ 
prise  network  equipment  mak¬ 
ers  in  1996,  but  the  Menlo  Park, 
Calif.,  firm  has  invested  in  none 


no 

ation 


since. 

This  is  not 
to  say  that 
innovation 
has  entirely 
disappeared. 

It’s  more  that  vendors  and  in¬ 
vestors  expect  enterprise  cus¬ 
tomers  to  start  spending  more 
of  their  money  on  managed 
network  services  and  other 
offerings  —  and  less  on  cus¬ 
tomer  premises  equipment. 

Most  of  the  money  ear¬ 
marked  for  high-tech  compa¬ 
nies  these  days  is  flowing  into 
emerging  service  providers, 
See  Innovation,  page  53 


Big  improvements  coming 
to  application  management 


BY  JEFF  CARUSO 

A  host  of  new  measurement 
tools  will  debut  soon,  giving 
net  managers  better  insight 
into  how  network  applica¬ 
tions  are  performing. 

NextPoint  Networks  will 


release  Version  2.0  of  its  S3 
product  next  week,  expanding 
the  types  of  applications  the 
tool  can  monitor  and  adding 
the  capability  to  predict  appli¬ 
cation  performance  based  on 
current  trends. 

See  Measurement,  page  14 


Online 


*  See  how  other  vendors  are  handling 
application  management. 

•  Our  free  newsletter  on  network  and 
systems  management. 
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Imagine  the  effect  on  your  customers  now  that 

you  can  make  fiber- to-the -desk  reality 


Victon  for  ;  1 1  You'd  better  prepare  yourself  for  the  accolades  you’ll 
receive  after  installing  the  new  Volition1''  Network  Solution  from  3M. 
Featuring  the  widely  supported  VF-45  interconnect,  the  rugged,  reliable 
Volition  system  is  your  total  fiber  optic  network.  Installation  is  fast  and 
easy  —  you  can  terminate  two  fibers  in  just  two  minutes.  Oh.  and  did 
we  say  that  it’s  available  for  about  the  cost  of  copper?  The  Volition 
system  lets  you  provide  the  power  and  access  your  customers  have  been 
begging  for.  And  it  finally  brings  you  the  hero  worship  you  deserve. 

800  695  0447  ext. 153  www.3M.com/volition/nw 


Volition 

Fiber  to  the  people. 


Volition.  VF-45  and  the  "dot  wave"  symbol  are  trademarks  of  3M.  ©3M  1999 
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Federal  hacker  watching.  That 
leaked  federal  plan  to  set  up  an 
antihacker  monitoring  system  has 
created  considerable  controversy. 
What  do  you  think?  Read  our 
background  articles,  talk  about  it 
in  our  forum  and  take  our  insta- 
poll  on  the  topic.  DocFinder:  4041 

Politics  at  Microsoft.  Microsoft’s 
gone  through  quite  a  few  changes 
as  of  late,  from  reorganizations  to 
last  week's  news  that  Paul  Maritz, 
onetime  Gates  heir  apparent,  is 
stepping  down  as  vice  president 
of  the  developer  group.  What 
does  it  all  mean?  Discuss  it  in  our 
latest  forum.  DocFinder:  4042 

Great  White  North./Ve/woA  World 
reporter  Julie  Bort  traveled  to 
Nunavit,  in  the  arctic  region  of 
Quebec.  Read  her  report  on  net¬ 
working  —  and  life  —  in  the  far 
north.  DocFinder:  4043 

Help  desk.  A  user  with  a  Check 
Point  Software  firewall  is  trying  to 
determine  how  to  get  the  firewall 
to  catalog  user  logons  by  name, 
not  IP  number.  Suggestions? 
DocFinder:  4029 

User  excellence.  Been  innovative 
with  your  network  in  the  past 
year?  Enter  our  annual  User 
Excellence  Award  competition. 
The  winner  gets  a  story  in 
Network  World  as  well  as  an 
award  at  the  next  ComNet  show  in 
Washington,  D.C.  DocFinder:  3737 

You  earn  what?  Our  logs  show 
that  the  most  popular  online  fea¬ 
ture  of  our  You  Issue  last  week 
was  the  salary  calculator.  If  you 
haven't  tried  it,  see  how  your 
salary  compares  to  those  of  your 
peers.  Answer  a  few  questions 
about  your  training,  education, 
title  and  geographic  location,  and 
the  calculator  will  tell  you  how 
much  you  should  be  earning, 
based  on  data  from  our  1999 
salary  survey.  DocFinder:  3925 


How  to  get  onto 
Network  World  Fusion 

Click  on  Register  on  the  home  page 
and  follow  the  instructions. 
Subscribers,  keep  your  NWF  number 
—  highlighted  on  the  front  cover's 
mailing  label  —  handy  during 
registration.  Nonsubscribers 
must  fill  out  an  online 
registration  form. 


Don  Montabana  has  found  a 
winning  way  to  run  the  University  of 
Pennsylvania's  networks.  Page  42. 
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BOTCHED  BY  BUREAUCRACY 

In  1988,  the  Department  of  Defense  began  an  effort 
to  boost  the  security  of  its  nonclassified  networks. 
By  1996,  the  program  had  fallen  flat,  the  victim  of 
bureaucratic  infighting.  Today,  the  agency  is 
launching  a  new  effort.  But  will  the  results  be 
different?  Page  36. 


REVIEW: 

If  servers  were 
ice  cream  cones, 
the  Micron  NetFrame 
5200  would  be  a  scoop 
of  vanilla,  no  jimmies.  See 
review  on  Page  39. 
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Domino  and  AS/400  tie  the  knot 

When  Lotus  and  parent  company  IBM 
began  extolling  the  virtues  of  running  the 
Lotus  Domino  server  on  IBM’s  AS/400  two 
years  back,  know-it-all  industry  analysts  and 
press  types  let  out  a  collective  yawn.  Who 
would  devote  such  an  expensive  machine 
to  software  that  runs  just  fine  on  a  low-end 
server  running  Windows  NT,  they  asked? 
The  answer  so  far  turns  out  to  be  28%  of 
Domino  users,  says  IBM,  and  that’s  why  Big 

Blue  last  week 
announced  the  up¬ 
coming  release  of 
three  lower-priced 
AS/400  servers  that 
will  be  optimized 
specifically  for  Dom¬ 
ino.  Scheduled  to 
ship  Sept.  24,  the 
Domino-equipped 
machines  will  sell 
for  between  $  1 1 ,000 
and  $22,500.A  bare- 
Big  Blue  s  AS/400  will  bones  AS/400  today 

be  outfitted  for  the  starts  at  $27,000 

Domino  crowd.  without  software. 


Ruling  targets  Internet  gambling 

The  New  York  State  Supreme  Court  last 
week  said  the  state’s  Attorney  General’s 
office  was  within  its  rights  in  acting  with 
federal  prosecutors  to  freeze  $800,000  in 
assets  owned  by  World  International 
Gaming  Corp.,  which  conducts  gambling 
operations  over  the  Internet.While  the  com¬ 
pany  is  based  in  Bohemia,  N.Y.,  World 
International  Gaming  uses  servers  that  are 
on  the  Caribbean  island  of  Antigua,  where 
gambling  is  legal.  New  York  prohibits  casino 
gambling.  Justice  Charles  Ramos  decided 
“the  act  of  entering  the  bet  and  transmitting 
the  information  from  New  York  via  the 
Internet  [constitutes]  gambling  activity 
within  New  York.”  World  Interactive 
Gaming  plans  to  appeal. 

ATM  Forum  transfers  leadership 

There’s  been  a  change  at  the  top  of  the 
ATM  Forum.  George  Dobrowski  has  stepped 
down  after  serving  two  years  as  president 
and  will  be  replaced  by  Marlis  Humphrey, 
who  had  been  serving  as  chairman. 
Humphrey  will  now  hold  both  titles. 
Dobrowski,  who  was  the  group’s  technical 
chairman  before  becoming  president, 
recently  became  chief  technology  officer  at 
Ficon  Technology.  Humphrey,  a  consultant 
at  Paradyne,  is  in  the  process  of  moving  to  a 
new  job  where  she  will  be  involved  in  tech¬ 
nology  and  standards  development. 

Microsoft's  Ballmer  reshuffling 
deck 

The  “Ballmerization”  of  Microsoft  contin¬ 
ued  last  week  with  news  that  Paul  Maritz, 


vice  president  of  the  developer  group,  is 
taking  a  lesser  role  and  could  retire.  It  is  the 
latest  in  a  series  of  moves  reportedly  orches¬ 
trated  by  Steve  Ballmer,  who  took  over  as 
Microsoft  president  in  March.  Earlier  this 
year,  Chief  Technology  Officer  Nathan 
Myhrvold  took  a  leave  of  absence  and  vice 
presidents  Pete  Higgins  and  John  Ludwig 
left  the  company.  David  Vaskevitch,  who 
reports  to  Maritz,  will  assume  responsibility 
for  the  developer  group,  according  to  The 
Wall  Street  Journal. 


New  bells  for  Catalyst  5000 
switches 

Cisco  this  week  is  expected  to  unveil 
three  new  modules  for  its  Catalyst  5000 
LAN  switches  that  feature  enhanced  quality- 
of-service  (QoS)  capabilities  and  greater 
port  density.  The  new  products  include 
a  24-port  10/100  RJ-45  module,  a  36-port 
10/100  RJ-21  module  and  a  24-port 
100FX  MT-RJ  multimode  fiber  module.  QoS 
features  on  the  modules  include  wire-speed 
Layer  3  forwarding  and  Fast  EtherChannel, 
802.1Q/p.These  features  are  designed  to  let 
users  classify  traffic  into  one  of  multiple  pri¬ 
ority  classes  and  manage  those  classes  to 
ensure  that  applications  such  as  voice  are 
prioritized. 


Do  hackers  toast  marshmallows? 


Hackers  looking  to  get  away  from  it  all,  and 
at  the  same  time  hone  their  skills,  will  be  set¬ 
ting  up  tents  near  Berlin  this  week  as  part  of 
a  three-day  event  sponsored 
by  Germany’s  premiere 
hacker  group,  the 
Chaos  Computer 
Club.  The  camp 
will  be  divided 
into  theme  “vil¬ 
lages,”  where 
participants 
can  choose 
the  topic 
that  most  interests  them.  Typical  of  the 
events  will  be  the  Linux  Death  match  ,  a  real¬ 
time  hacking  competition. 


Company  looks  to  quiet  crosstalk 

Start-up  Bandspeed  claims  it  has  found  a 
way  to  solve  one  of  the  most  vexing  digi¬ 
tal  subscriber  line  (DSL)  problems: 
crosstalk.  Bandspeed  says  its  Channel 
Resolution  System  (CRS)  eliminates  noise 
from  nearby  wires  that  disrupts  asymmet¬ 
ric  DSL  by  forcing  it  to  run  at  lower 
speeds.  In  the  best  case,  CRS  can  increase 
the  bandwidth  on  a  DSL  line  by  two-and-a- 
half  times,  the  company  says.  Because  DSL 
signals  die  out  as  they  travel  down  a  wire, 
starting  off  with  higher  bandwidth  means 
more  bandwidth  can  be  delivered  farther. 
The  CRS  technology  is  expected  to  show 
up  ir  DSL  equipment. 


Products  on  tap  for 
LinuxWorld  release 


TurboLinux,  IBM  among  vendors  with  new  wares. 


BY  ROBIN 

SCHREIER  HOHMAN 
AND  DENI  CONNOR 

TurboLinux  is  readying 
software  for  tying  Linux,  Win¬ 
dows  NT  and  Solaris  servers 
into  the  same  clusters  —  a 
product  that  should  be 
among  the  more  interesting 
enterprise  Linux  offerings 
making  their  debuts  at  next 
week’s  LinuxWorld  Confer¬ 
ence  &  Expo. 


and  Red  Hat  Software,  per¬ 
haps  the  Linux  market’s  best- 
known  vendor,  is  expected  to 
take  advantage  of  the  show 
buzz  and  start  selling  its 
stock.  Separately,  hard-charg¬ 
ing  VA  Linux  Systems  is 
expected  to  announce  its  ini¬ 
tial  public  offering  of  stock. 

IBM  is  expected  to  use 
the  conference  to  outline  a 
series  of  Linux  initiatives 
involving  everything  from 
Lotus  Notes  to  Tivoli  manage 


Linux  leaps 

The  Linux 
server  operating 
system  more 
than  doubled  in 
market  share  last 
year  from  1997, 
as  the  software 
became  more 
accepted  in  the 
enterprise. 


24.2% 

1998 


Linux  17.2% 


Windows 
NT  Server  35.8% 


Combined 

Unix 

17.4% 


NetWare 
3.X  and  4.X 


source:  ioc,  framingham,  mass.  Total  shipments:  4.3  million  licenses 


The  San  Jose  conference 
promises  to  be  a  who’s  who 
and  what’s  what  of  the  Linux 
market,  which  more  than  dou¬ 
bled  in  size  from  1997  to 
1998  and  has  maintained 
momentum  so  far  this  year. 

Linux  creator  Linus  Tor- 
valds  will  be  among  the  con¬ 
ference’s  keynote  speakers, 


For  the  answer  to  this  week's  question  and 
more  net  trivia,  visit  Network  World  Fusion 
and  enter  2467  in  the  DocFinder  box. 


This  week's  question: 

How  much  does  Network 
Solutions  charge  to 
register  a  new  .com 
domain? 


www.nwfusion.com 


ment  software  to  Netfinity 
servers.  Others,  such  as 
Magic  Software  and  Nova- 
Stor,  will  also  make  Linux- 
related  announcements. 

As  for  TurboLinux,  its 
new  TurboCluster  server,  cur¬ 
rently  in  beta  testing,  will  be 
demonstrated  running  on 
IBM  Netfinity  servers,  as  well 
as  at  Compaq’s  and  Adaptec’s 
booths. 

The  software,  which  runs 
on  Intel  and  Alpha  proces¬ 
sors,  will  let  customers  bind 
20  or  more  machines  into 
a  cluster  for  handling  Web 
or  other  applications  that 
require  high  scalability  and 
reliability. 

Sun  offers  a  clustering 
product  that  scales  up  to  35 
servers,  and  Microsoft  offers 
software  for  clustering  a  pair 
of  multiprocessor  machines. 
But  observers  say  the  Turbo¬ 
Linux  software  will  let  com¬ 
panies  build  clusters  that 
are  more  scalable  and  less 
expensive. 

See  Linux,  page  53 
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News 


Standard  needed  so  VPN  failures  can  be  detected 


BY  TIM  GREENE 

The  Internet  Engineering 
Task  Force  is  working  to  plug  a 
gap  in  the  IP  Security  virtual 
private  network  standard  that 
lets  VPN  gear  continue  to  send 
packets  even  after  the  equip¬ 
ment  receiving  the  data  has 
failed. 

Because  IPSec  is  the  authen¬ 
tication  and  encryption  stan¬ 
dard  that  most  VPN  vendors  are 
adopting,  the  standard  should 
spell  out  how  VPN  tunnel 
servers  can  quickly  discover 
that  the  peer  or  client  it  was 
talking  to  has  died,  industry 
experts  say. 

Otherwise  vendors  will  keep 
using  proprietary  methods  that 
inhibit  full  interoperability 
among  multivendor  gear.  Such 
interoperability  is  key  to  an 
important  potential  use  of 
VPNs:  granting  business  part¬ 
ners  secure  access,  says  Eric 


SAN  JOSE  —  Cisco’s  new 
packetized  telephony  prod¬ 
ucts  are  designed  to  let 
users  migrate  to  a  single  inte¬ 
grated  data,  voice  and  video 
network. 

Cisco  last  week  announced 
five  products  intended  to  help 
users  benefit  from  the 
reduced  costs,  improved  net¬ 
work  efficiency  and  multi- 
media  business  applications 
converged  networks  promise. 
The  products  include: 

•  A  digital  T-l/E-1  High- 
Capacity  Voice  Port  Adapter 
for  Cisco  7200  and  7500 
routers. 

•  A  digital  T-l/E-1  Packet 
Voice  Trunk  Network  Module 
for  Cisco  2600  and  3600 
routers. 

•  The  Cisco  3660  multiser¬ 
vice  router. 

One  user  says  the  new 
offerings,  particularly  the 
3660,  will  indeed  help  reduce 
equipment  costs. 

“It’s  exactly  what  we’ve 
been  waiting  for,  kind  of  the 
piece  we’ve  been  missing,”  says 
Bill  Homa,  chief  information 


Zines,  a  consultant  with 
TeleChoice,  a  telecom  consult¬ 
ing  group  in  Boston. 

Interoperability'  should  let 
your  business  partner’s  gear 
talk  to  yours,  no  matter  what 
company  makes  it,  as  long 
as  they  both  meet  the  IPSec 
standard.  And  that  should 
include  a  keep-alive  feature 
that  would  cure  the  problem, 
Zines  says. 

The  IETF  has  received  sev¬ 
eral  keep-alive  proposals, 
according  to  Robert  Mos- 
kowitz,  co-chair  of  the  IETF’s 
IPSec  Workgroup,  but  none 
were  discussed  at  the  group’s 
last  meeting.  Other  issues, 
such  as  proper  configuration 
of  IPSec  clients  and  network 
address  translation,  took  pre¬ 
cedence,  he  says. 

Moskowitz  also  says  there  is 
no  consensus  within  the  group. 
“The  answer  is  that  we  don’t 
know  the  best  way  to  do  it.” 


officer  at  Hannaford  Bros.  Co. 
of  Scarborough,  Maine,  which 
operates  1 50  grocery  stores  on 
the  East  Coast  and  is  running 
voice  over  its  ATM  data  net- 


Cisco's  new  3660  router  is  de¬ 
signed  to  help  users  better  inte¬ 
grate  voice  and  data  networks. 


work.  “The  issue  for  us  has 
been  switching  voice  calls.  ” 

Until  now,  the  company  has 
had  to  install  and  program  sev¬ 
eral  Cisco  MC  3810s  and 
StrataCom  BPX  switches. 

“The  3660  and  theT-1  cards 
in  it  will  eliminate  all  that,” 
Homa  says. 

The  only  downside  to 
Hannaford’s  plan  is  that  the 
company  will  have  to  wait 
another  month  for  Cisco  to 
ship  ATM  modules  for  the 
3660  so  it  can  directly  inter¬ 
face  the  ATM  switches  in  its 


Some  vendors  have  built 
proprietary  technologies  to 
meet  the  need  for  a  keep-alive 
feature.  Intel  gets  around  the 


net,  Homa  says. 

The  3660  is  an  eight-slot 
chassis  with  two  fixed 
10/100M  bit/sec  Ethernet 
ports.  Six  of  the  slots  can  be 
used  to  house  network  mod¬ 
ules  such  as  the  new  digital 
T-l/E-1  boards.  The  other  two 
slots  can  support  what  Cisco 
calls  Advanced  Integration 
Modules  for  hardware  acceler¬ 
ation  and  additional  process¬ 
ing  power. 

Cisco’s  digital  T-l/E-1  voice 
port  adapter  and  network 
module  products  let  users 
add  higher-density  voice  to 
new  and  existing  equipment. 
The  products  provide  a  range 
of  density  options:  from 
two  to  48  simultaneous  voice 
calls  on  the  2600  series;  two 
to  288  simultaneous  voice 
calls  on  the  3600  series;  and 
48  to  720  simultaneous  voice 
calls  on  the  Cisco  7200/7500 
series. 

Cisco  also  announced  a 
T-l/E-1  Multiflex  Voice/WAN 
Interface  Card  (Multiflex 
VW1C)  for  Cisco  2600  and 
3600  routers,  and  the 
Multimedia  Conference  Man¬ 
ager  (MCM)  H.323  Gatekeeper 


problem  by  shipping  its  VPN 
gateways  with  IPSec  software 
and  Shiva  Smart  Tunnel  soft¬ 
ware,  products  Intel  acquired 


on  Cisco  2600  and  Cisco  7200 
series  routers. 

The  T-l/E-1  Multiflex  VWIC 
card,  as  well  as  the  digital 
T-l/E-1  adapters,  support 
mixed  environments  of  time- 
division  multiplexer  voice, 
voice  over  IP  and  voice  over 
frame  relay,  Cisco  says.  The 
MCM  H.323  Gatekeeper  is 
implemented  as  a  feature  set 
in  Cisco  IOS  software  and 
provides  management  and 
quality  of  service  for  voice 
and  video. 

The  Gatekeeper  ensures 
that  voice  and  videoconfer¬ 
encing  connections  receive 
priority  over  data  traffic.  The 
Gatekeeper  also  provides 
security  for  conferencing  and 
voice-over-IP  traffic,  Cisco 
says. 

The  H.323  standard  defines 
call  signaling  procedures  and 
services  available  in  desktops, 
servers  and  gateways  in  an  IP 
voice  infrastructure. 

The  new  products  will  ship 
in  August.  The  digital  T-l/E-1 
Voice  Interfaces  for  the 
7200/3600/2600  series  range 
from  $7,400  to  $23,000.  Entry- 
level  pricing  for  the  new  3660 
Multiservice  Platform  is 
$10,700. 

Pricing  for  T-l/E-1  Multiflex 
VWIC  for  the  Cisco  2600/ 
3600  series  starts  at  $1,300. 

Cisco:  www.cisco.com. 


when  it  bought  Shiva.  Smart 
Tunnel  includes  keep-alive, 
according  to  Bob  Lonadier,  an 
Intel  VPN  product  manager. 

Nortel’s  Contivity  gear  uses 
information  gathered  via  rout¬ 
ing  information  protocol  (RIP) 
to  update  which  other 
Contivity  boxes  are  still  active. 
Compatible  Systems’  IntraPort 
devices  ping  each  other. 

Other  vendors,  such  as 
TimeStep  and  3Com,  are  wait¬ 
ing  for  a  standard  before  incor¬ 
porating  a  keep-alive  feature. 

Without  the  feature,  differ¬ 
ent  vendors’  boxes  can  still 
establish  encrypted  sessions 
over  an  IP  backbone  and 
transfer  data.  But  if  one  box 
goes  down  and  loses  track  of 
established  tunnels,  it  is  cum¬ 
bersome  to  establish  new 
ones. 

“That  was  one  of  the 
biggest  problems  we  had  in 
our  interoperability  tests,”  says 
Joel  Snyder,  a  senior  partner  at 
Opus  One,  a  Tucson,  Ariz.,  con¬ 
sulting  group.  Snyder  helped 
run  VPN  interoperability  tests 
in  May  at  NetWorld+Interop 
’99  in  Las  Vegas. 

If  there  is  no  other  mecha¬ 
nism,  the  sending  equipment 
would  eventually  find  out  the 
receiving  device  had  failed, 
but  that  could  take  hours.  At  a 
preset  interval,  IPSec  gear 
switches  the  key  it  uses  to 
encrypt  data.  When  no  key 
exchange  information  is  forth¬ 
coming  from  the  box  at  the 
other  end,  the  sending  box 
would  know  the  gear  was  no 
longer  up  and  running  (see 
diagram). 

The  failed  tunnel  server 
might  have  come  back  up  in 
the  meantime,  in  which  case  a 
new  tunnel  would  be  set  up. 
But  data  that  was  sent  after  the 
first  tunnel  failed  would  be 
lost  and  have  to  be  resent. 

Such  potentially  long  out¬ 
ages  are  of  particular  concern 
to  VPN  service  providers, 
according  to  TimeStep’s  Roy 
Pereira,  a  senior  product  man¬ 
ager.  Without  quick  notification 
of  a  failure,  service  providers 
will  have  trouble  maintaining 
network  quality  they  have 
promised  to  customers  in  ser¬ 
vice-level  agreements. 

“They  really  need  to  know  if 
something  is  up  or  down. They 
are  religious  about  reliability,” 
Pereira  says.  3 


What  we  have  here  is  a  failure  to  communicate 

Interoperability  of  virtual  private 

network  gear  is  hindered  because  ©  0ther  servers  that  have 
currently  there  are  only  proprietary  established  connections 

m  imuL  .  ,  .  r  .  *  to  the  downed  server  keep 

ways  for  VPN  boxes  to  let  each 

other  know  they  are  still  alive. 


sending  data. 


©  One  tunnel  server  in  a  VPN 
network  fails. 


Connected 

A« 


Connected 


VPN  Server  A 


Q  Only  when  a  server  tries  and  fails 
to  switch  encryption  keys  with  the 
downed  server  does  if  learn  about 
the  failure. 


VPN  Server  D 


3660  router,  digital  T-l  cards  help  users  merge  voice,  data  nets. 

BY  JIM  DUFFY 
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The  average  Fortune  1000  company  loses  $5.1  million  a  year  in  productivity 
due  to  networks  that  fail  to  support  the  applications  they're  expected  to  run. 

Losses  you  can  avoid  with  a  network  from  FORE  Systems. 

FORE  networks  can  handle  any  applications  you  throw  at  them,  without 
going  down.  Because,  end  to  end,  a  FORE  network  is  Application  Aware"! 

FORE  networks  recognize  user  applications  and  meet  their  needs  on  an 
individual  basis.  Bringing  guaranteed  service  levels  and  predictability  to 
your  mission-critical  applications. 

FORE  is  first  with  directory  enabled  networking.  Giving  you  a  policy 
managed  infrastructure  that  simplifies  network  operation  and  makes  your 
applications  easier  to  deploy. 

And  only  FORE  delivers  high  performance  network  security  through 
embedded  firewall  switching. 

No  wonder  thousands  of  companies  rely  on  Networks  of  Steel"  from 
FORE  Systems. 

With  so  much  money  at  stake,  who  can  afford  a  weak  link? 


FORE 

SYSTEMS. 


www.fore.com  1.888.404.0444  Networks  of  Steel. 

Free  Product  info  enter  NWInfoXpress  #7  online  @  www.networkworld.com/infoxpress 


News 


itter  pills  are  seen  as  good  for  ailing  Compaq 


Computer  company  imports  dismal  earnings,  announces  plans  to  lay  off  up  to  8,000  workers. 


BY  DENI  CONNOR 

HOUSTON  —  Compaq 
appears  to  have  gained  the 
confidence  of  some  Wall  Street 
analysts  with  last  week’s 
announcement  of  additional 
layoffs,  financial  restructuring 
and  plant  closings  designed  to 
stem  recent  losses. 

Newly  named  CEO  Michael 
Capellas  said  in  a  press  con¬ 
ference  that  the  company  will 
cut  as  many  as  8,000  jobs, 
close  and  consolidate  facili¬ 
ties,  and  take  a  $700  million 
to  $900  million  restructuring 
charge.  The  company  had 
already  planned  to  eliminate 
1,750  jobs  as  a  result  of  a  pre¬ 
viously  announced  restructur¬ 
ing  of  its  acquired  Digital 
operations. 

“[Compaq’s  moves]  set  the 
stage  for  a  fairly  rapid  recov¬ 
ery  of  momentum,”  says 
Stephen  Dube,  an  analyst  with 
Wasserstein  Perella  Securities 
in  New  York. 


CALL  FOR  NOMINATIONS 


We’re  looking  for 
companies  that  make 
innovative  or  effective  use 
of  network  technology  to 
meet  business  objectives 
for  our  annual  User  Ex 
Award  competition.  If  you 
or  a  user  organization  you 
know  of  has  completed  a 
network  project  that’s 
deserving  of  our  attention, 
let  us  know  about  it.  Go 
online  for  more  infor¬ 
mation  on  the  competition 
and  for  the  entry  form. 
DocFinder:  4025 


The  company  reported  it 
lost  $184  million  in  the  second 
quarter,  only  slightly  less  than 
that  expected  by  Wall  Street 
analysts  surveyed  by  FirstCall. 
Compaq  blamed  inadequate 
revenue  growth,  a  decline  in 
gross  margins  and  an  increase 
in  operating  expenses. 

In  the  CEO’s  office  for  one 
week,  Capellas  says  Compaq 
will  take  other  actions  to 
attempt  to  reverse  its  losses. 
The  company  will  make  addi¬ 
tional  investments  in  Tru64 
Unix,  drive  its  industry- 
standard  ProLiant  servers  to 
higher  levels  of  scalability  and 
invest  more  in  the  develop¬ 
ment  of  Internet  appliances. 
The  company’s  future,  accord¬ 
ing  to  Capellas,  is  in  Internet 
and  electronic  commerce 
products  and  services,  an 
environment  he  characterized 
as  “nonstop.” 

Compaq  expects  conserva¬ 
tive  buying  in  the  global  enter¬ 
prise  in  the  fourth  quarter, 


attributable  to  Year  2000  wor¬ 
ries.  Capellas  says  that  PC  and 
e-commerce  product  demand 
will  remain  strong. 

Compaq  is  also  looking  to 
increase  its  direct  sales  to  glob¬ 
al  customers.  Currently,  15%  of 
global  customer  sales  are 
direct.  By  year-end,  Compaq 
expects  that  number  to  be  25% 
and  eventually,  40%. 

Industry  watchers  ex¬ 
pressed  cautious  support. 

“Compaq  can  maintain  or 
even  increase  market  share  if  it 
presents  a  clear  marketing  mes¬ 
sage  focused  primarily  on  the 
set  of  strengths  it  can  marshal 
for  enterprise  accounts,”  says 
Michael  Kwatinetz,  an  analyst 
with  CS  First  Boston  in  New 
York.  “We  expect  the  company 
to  stress  to  clients  innovations 
like  its  new  eight-way  servers, 
Internet  caching  appliances 
and  lightweight  notebooks.” 

“Capellas  appears  to  be  a 
man  of  action,”  Dube  says.  “The 
company  seems  to  be  in  the 


A  tough  job  ahead 

Only  one  week  on  the  job  and  new  Compaq  CEO 
Michael  Capellas  is  already  fighting  an  uphill 
battle.  The  company  announced  $184  million  in 
losses  last  quarter,  its  first  quarter  in  the  red  since 
buying  Digital  one  year  ago. 
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mode  of  relatively  rapid  action, 
and  Capellas  fits  that  mode.” 

The  company  reported  a 
30%  growth  in  second  quarter 
server  sales  and  a  40%  growth 
in  quarterly  storage  product 
sales  year-over-year.  Its  Enter¬ 
prise  Solutions  and  Services 


Group  reported  an  11%  in¬ 
crease  in  quarterly  revenue 
year-over-year. 

“For  the  next  few  quarters, 
Compaq  could  show  reason¬ 
able  revenue  growth  coupled 
with  improving  operating  mar¬ 
gin,”  Kwatinetz  adds.  01 


Investment  firm  puts  money  on  single  sign-on  access 

T.  Rowe  Price  uses  Dascom  IntraVerse  to  control  intranet  and  extranet  access. 


BY  ELLEN  MESSMER 


BALTIMORE  —  With 
spread  of  Web-based 
intranet  applications  for 
employees  and  extranet 
applications  for  cus¬ 
tomers,  finding  a  simple 
means  of  authorization 
and  access  control  for 
all  these  users  has 
become  problematic. 

Instead  of  distributing 
multiple  passwords  to 
each  person,  the  ideal 
would  be  to  have  just 
one  password  that 
would  grant  the  individ¬ 
ual  access  to  all  autho¬ 
rized  applications  after 
a  one-time  authenti¬ 
cation.  This  has  often 
been  called  the  “Holy 
Grail”  of  security,  and 
T.  Rowe  Price  is  proving 
you  can  reach  it  on 
a  large  scale  for  pur¬ 
poses  of  electronic 
commerce. 


the 


“On  our  intranet,  we  now 
have  4,500  users  that  have 
a  single  password  for  use 


with  a  lot  of  our  applications, 
such  as  human  resources,” 
says  Kirk  Kness,  assistant 


One-time  sign-on 


Dascom's  IntraVerse  3.0  authorization  software  will  provide  single  sign-on 
access  to  applications  after  the  user's  initial  authorization. 


©A  client  already  signed 
on  to  the  network 
authenticates  at  Web 
Seal  with  a  request  for 
access  to  an  appli 
cation  resource  on  a 
back  end  server. 


Application  logon 
request  with  digital 
ID  certificate 


Global  ©  WebSeal  passes  the  IntraVerse  identity  of 

Sign-On  the  user  to  the  Global  Sign  on  Server.  The 

Server  GSO  server  returns  the  user's  sign  on  name 

and  password  for  the  requested  application. 

User  name/password  database 
for  all  corporate  applications 


User  name/pass¬ 
word  for  requested 
applications  — *- 


Human  resource 
application 


Finance  application 


WebSeal 

server 


Application 

server 


Database  application 


©The  request  is  forwarded  to  the  intranet  application  server  for  user 
access.  The  second  application  sign  on  is  invisible  to  the  user. 


vice  president  of  application 
architecture.  “They  used  to 
have  to  use  a  lot  of  pass¬ 
words.  But  last  fall 
we  started  retrofitting 
applications  for  what 
we  call  integrated  sign- 
on,  and  we’re  building 
this  into  new  applica¬ 
tions,  too.” 

T.  Rowe  Price  has 
accomplished  this 
using  Dascom’s  Intra¬ 
Verse  server-based  soft¬ 
ware.  The  product  lets 
you  set  up  a  Web-based 
authorization  proxy 
server  called  WebSeal 
at  the  Internet  access 
point  or  within  an 
intranet.  After  the  user 
has  authenticated  once 
at  this  proxy,  this  infor¬ 
mation  is  sent  to 
another  server,  called 
the  Dascom  Global 
Sign-On  Server  (GSO). 
The  GSO  controls  user 
See  Price,  page  15 
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In  today’s  world,  the  information  has  to  be  there.  II  it’s  unavailable  lor  even  a  moment,  you'll  lose  customers.  VERITAS* 
software  ensures  you  have  the  highest  level  of  information  availability  possible.  So  instead  of  losing  customers,  your 
business  can  keep  winning  new  ones.  Call  1-800-729-7894  x:  81016,  surf  www.veritas.com.  or  start  making  those  flyers. 


BUSINESS  WITHOUT  INTERRUPTION: 


VERITAS 


Free  Product  info  enter  NWInfoXpress  #10  online  @  www.networkworld.com/lnfoxpress 


News 


hT&T  wins  cable  battle,  but  war  with  RBOCs  continues 


RBOCs  say  their  Internet  and  data  lines  should  be  completely  deregulated,  too. 


The  disconnected  dozen 


The  iAdvance  Coalition  lists  the 
following  states  as  the  "disconnected 
dozen"  and  claims  they  would  have  far 
more  high-speed  Internet  exchange  points  if 
the  Bell  companies  had  data  restrictions  lifted: 


Expected 

Expected 

number  of 

number  of 

Actual 

hubs  if  all 

Actual 

hubs  if  all 

number 

lines  were 

number 

lines  were 

State 

of  hubs* 

unregulated 

State  of  hubs* 

unregulated 

Alabama 

6 

40 

New  Hampshire  3 

42 

Arkansas 

2 

28 

North  Dakota  0 

24 

Idaho 

2 

30 

Oklahoma  7 

33 

Iowa 

3 

33 

South  Dakota  0 

30 

Maine 

0 

29 

West  Virginia  0 

24 

Montana 

0 

26 

Wyoming  1 

30 

1  Hub:  An  Internet  traffic  exchange  point  where  one  backbone  provider  has  a  T-3  or  higher 
connection  to  at  least  two  other  providers. 
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SOURCE  ADVANCE  COALITION.  WASHINGTON.  D  C. 


BY  DAVID  ROHDE 

WASHINGTON,  DC.  — 
AT&T  last  week  won  a  key 
battle  in  its  all-fronts  war  to 
keep  regulators  from  forcing 
open  its  cable  network  facili¬ 
ties  to  all  ISPs. 

But  AT&T’s  rivals,  the 
regional  Bell  operating  com¬ 
panies,  took  advantage  of 
AT&T’s  win  to  step  up  their 
own  demands  for  deregula¬ 
tion  of  their  data  and  Inter¬ 
net  services  so  they,  too, 
can  become  bigger  Internet 
players. 

In  the  cable  arena,  AT&T 
finally  won  the  approval  of 
the  San  Francisco  Board  of 
Supervisors  for  the  transfer  of 
its  cable  licenses  from  the  for¬ 
mer  Tele-Communications, 
Inc.  without  an  explicit  open- 
access  requirement.  The 
board  voted  9-2  in  favor  of  the 
transfer,  but  said  it  would 
reconsider  open  access  when 


the  license  comes  up  for 
renewal  under  AT&T’s  name 
in  December. 

AT&T  faces  more  such 
fights  around  the  country 
after  a  judge  in  Portland,  Ore., 
earlier  this  year  upheld  the 
right  of  local  governments  to 
place  open-access  rules  on 
cable  lines. 

AT&T  officials  say  the  local 
fights  are  being  stirred  up 
by  America  Online,  GTE  and 
others  with  a  larger  goal  in 
mind.  “The  effort  that  they’re 
undertaking  at  the  local 
level  is  really  designed  to 
put  pressure  on  the  Federal 
Communications  Commission 
and  Congress  to  change  their 
position,”  says  Jim  Cicconi, 
AT&T’s  general  counsel. 

That  kind  of  pressure  was 
exactly  what  RBOC  lobbyists 
also  had  in  mind  last  week 
when  they  released  a  report 
claiming  that  12  states  lack 
“high-speed  Internet  access” 


because  of  onerous  rules  on 
the  Bells. 

The  report  —  from  a  group 
that  calls  itself  the  Inter¬ 
net  Advancement  Coalition, 
or  iAdvance,  but  is  primarily 
funded  by  SBC  Communi¬ 
cations  and  Bell  Atlantic  — 
says  the  solution  for  the 
“disconnected  dozen”  is  to 
remove  federal  regulations 
preventing  RBOCs  from  car¬ 
rying  data  traffic  beyond 
local  calling  boundaries. 

Such  a  change  would  pro¬ 
vide  the  incentive  for  RBOCs 
to  build  and  host  many 
more  Internet  exchange 
points,  or  “backbone  hubs,” 
just  as  non-Bell  companies 
have  done,  according  to  the 
group’s  study. 

Opponents  of  iAdvance, 
such  as  the  big  long-distance 
carriers  and  some  competi¬ 
tive  local  exchange  carriers, 
dismiss  the  study  as  a  con¬ 
trived  attempt  to  put  an 
academic  gloss  on  a  lobbying 
effort.  They  point  out  that 
most  high-capacity  Internet 
hand-off  points  are  built  by 
ISPs  without  regard  to 
whether  the  facility  is  located 
in  a  Bell  or  non-Bell  local  call¬ 
ing  territory. 

The  author  of  the  study, 
telecom  economist  Erik 
Olbeter,  concedes  that  two 
of  the  biggest  factors  in 
locating  Internet  hubs  such 
as  Network  Access  Points 
(NAP)  and  peering  sites  are 
population  density  and  in¬ 
come  levels.  But  even  after 


accounting  for  these  factors, 
Olbeter  says  he  found 
through  statistical  models 
that  states  whose  territories 
are  largely  Bell-controlled  are 
less  likely  to  have  nearby 
broadband  hand-offs  points 
than  those  with  a  lot  of  tradi¬ 
tional  non-Bell  telephone 
companies  (see  graphic). 

To  tout  the  study,  the 
iAdvance  group  held  a  press 
conference  hosted  by  its 
hired  lobbyists,  former 
Clinton  White  House  Press 
Secretary  Mike  McCurry  and 
former  Republican  congress- 
woman  Susan  Molinari. 

But  the  presentation 
seemed  to  get  mired  in  confu¬ 
sion  over  the  meaning  of  “dis¬ 
connected”  because  the  study 
claimed  a  lack  of  availability 
of  backbone  facilities,  not 
access  lines. 

For  example,  an  iAdvance 
written  statement  quoted 
author  Olbeter  as  saying: 
“The  vast  majority  of  Amer¬ 
icans  in  inner  cities  and  rural 
areas  simply  do  not  have 
access  to  the  high-speed 
Internet  and  are  unable  to 
reap  the  full  benefits  of  the 
digital  economy.” 

Olbeter  later  backed  off 
that  statement,  telling  Net¬ 
work  WorldM  don’t  know  if  it 
was  me  or  [iAdvance’s  public 
relations  representative]  who 
put  that  in  there.”  But  he 
added  that  even  broadband 
access  facilities  wouldn’t  be 
worth  much  if  traffic  got 
clogged  at  NAPs.  3 
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breaking  news 

Network  World  Fusion  now  has  more  news  than  ever. 
Check  out  these  stories  online: 


m 

m 


Get  your  news  here! 


NetFlash  delivers  network 
news  to  your  e-mail  inbox, 
every  day,  free  of  charge. 
And  it  includes  occasional 
flashes  of  wit.  Sign  up  today, 
sit  back  and  let  the  news 
come  to  you. 

DocFinder:  3850 


3Com  boosts  policy 
management  software 
package: 

3Com  announced  a  new 
version  of  its  policy  manage¬ 
ment  software  that  the 
company  says  simplifies 
management  of  cell-  and 
packet-based  networks. 

Transcend  Network  Control 
Services  Version  1.1  for 
Windows  NT  is  a  suite  of 
management  applications  for  3Com’s  network  systems.  It 
features  a  Web-based  architecture,  automatic  configuration 
tools  and  LAN  security  policy  enforcement  capabilities, 
3Com  says.  DocFinder:  4037 

Realnames  vendor  taps  Internet  players  for  advisory  board: 

Centraal  has  formed  an  advisory  board  of  highly  regarded 
members  of  the  Internet  community  to  help  shape  the 
company  ’s  policies  for  assigning  names  and  dealing  with 
name-related  disputes.  Centraal  operates  the  popular 
realnames.com  Web  site  that  looks  up  corporate  Internet 
addresses. DocFinder: 4038  „  ....  ,, 

Network  Associates  updates 
antivirus  software  for  Exchange: 

Network  Associates  today  announced’' 
the  release  of  a  new  version  of  its 

antivirus  software  for  Microsoft’s  Exchange.The  antivirus 
software  is  designed  to  detect  and  stop  e-mail  viruses  such 
as  Melissa  and  Worm.ZipExplorer.  DocFinder:  4039 
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It  was  the  only 
way  we  could 
photograph  our 
latest  router. 


Just  how  fast  is  Ericsson’s  new  Internet  backbone  router?  40  million 
packets  per  second  fast.  Great,  but  you  also  need  reliability. 

Well,  for  decades  now  Ericsson  has  been  building  business- 
critical  networks.  Experience,  in  the  shape  of  the  axi  520,  we  re  now 
bringing  to  datacom. 

So  not  only  do  you  get  superior  packet  performance  and  low 
latency,  but  it's  also  highly  flexible  and  scalable.  The  footprint  is 
very  small  and  port  density  is  exceptional.  Highly  maintainable 
modular  software  improves  reliability  and  cost  of  entry  is  low. 

Just  the  kind  of  class-leading  performance  you  need  —  whether 
you're  turbocharging  your  existing  network  to  meet  the  demands  of 
new  applications,  such  as  voice  over  ip,  or  preparing  tor  the  mobile 
data  explosion. 

Which  is  exactly  why  major  ISPs  and  carriers  can  rely  on  the 
axi  520  for  the  most  demanding  backbone  applications. 

ERICSSON  ^ 


Free  Product  info  enter  NWInfoXpress  #2  online  www.networkworld.com/lnfoxpress 


News 


«i/hite  House  plan  for  surveillance  system  draws  fire 


"The  protection  of  our  nations 
vital  computer-based  systen ; 
must  become  a  central  part  <f 
the  mission  of  our  tzorporatior ; 
and  our  government  agencie  . 
This  effort  will  not  be  easy." 


BY  ELLEN  MESSMER 

KASHIXGTOX  D  C  —  The 
White  House  wants  the  U.S.  to 
build  a  nationwide  intrusion- 
detection  system  to  monitor 
government  and  private-sector 
networks. 

The  idea  is  that  the  system 
would  automate  response  to 
net  security  attacks,  but  the 
proposal  is  garnering  heavy 
fire  from  political  opponents, 
civil  liberties  groups  and 
industry  representatives  who 
think  such  a  system  would 
raise  too  many  privacy  issues 
and  would  be  too  expensive  to 
implement. 

According  to  the  'National 
Plan  for  Information  Systems 
Protection.'  a  draft  document 
from  the  National  Security 
Council  (NSC).  President  Clin¬ 
ton  wants  the  government  to 
install  an  integrated  intrusion- 
detection  system  —  called  the 


Federal  Intrusion  Detection 
Network  (FID NET)  —  by  2003 
on  all  government  networks. 

'The  protection  of  our 
nation's  vital  computer-based 
systems  must  become  a  cen¬ 
tral  part  of  the  mission  of  our 
corporations  and  our  govern¬ 
ment  agencies.  This  effort  will 
not  be  easy."  Clinton  says  in 
the  draft. 

The  150-page  FIDNET  draft 
was  leaked  by  government 
officials  to  the  Washington. 
DC-based  civil  liberties 
group  Center  for  Democracy 
and  Technology  (CDT).  which 
last  week  posted  much  of 
the  plan's  content  at  www. 
cdt.org. 

The  draft  also  calls  for  'key 
corporations'  in  telecom, 
banking  and  energy  to  use  the 
same  kind  of  monitoring  and 
reporting  system  so  critical 
U.S.  information  systems  will 
be  protected  as  well 


Like  Ronald  Reagans  'Star 
Wars'  missile  defense  pro¬ 
gram.  the  Clinton  administra¬ 
tion's  network  defense  initia¬ 
tive  would  require  untold 
amounts  of  money  and  would 
be  based  on  untried  technolo¬ 
gies.  The  draft  calls  for  the  U.S. 
to  pick  a  'best-of-breed'  intru¬ 
sion-detection  system  and 
have  it  widely  deployed  in 
four  years,  with  the  FBI  as  its 
main  administrator. 


President  Bill  Clinton 

Because  FIDNET  would  be 
monitoring  network  traffic, 
this  Big  Brother  aspect  has 
incited  fierce  critics. 

'This  really  changes  the 
dynamic  of  how  the  govern¬ 
ment  goes  after  criminals.' 
says  Ari  Schwartz,  policy  ana¬ 
lyst  at  the  CDT.  'Instead  of 
just  tracking  down  criminals 
based  on  their  behavior,  it 
tracks  everyone.' 

While  I  S  privacy  laws  are 


complex.  Schwartz  noted  t  it 
the  government  can  prty 
much  do  what  it  wants  i  t 
invokes  the  specter  of  natic  d 
security. 

House  Majority  Leader  L  k 
Armey  (R-Texas)  said  he  d  s 
not  like  the  idea  of  what  e 
called  'a  new  Washing  n 
bureaucracy  to  protect  the  i- 
vate  sector  from  hackers  d 
computer  terrorists.’' 

See  Security,  page  5 


Measurement, 

continued  from  page  1 

Ganymede  Software  next 
week  will  embellish  its  Pega¬ 
sus  network  monitoring 
product  line  by  unveiling 
Pegasus  Application  Monitor, 
which  will  measure  the 
performance  of  end  users’ 
transactions. 

.Cnd  Concord  Communica¬ 
tions  in  the  next  few  weeks 
is  expected  to  expand  on 
its  relationship  with  First- 
Sense  Software  and  release 
a  product  that  will  collect 
performance  data  from  end 
systems. 

The  software,  called  Pulse- 
Check.  will  be  able  to  mea¬ 
sure  application  response 
times  and  feed  data  into 
Concord's  principal  data¬ 
base.  according  to  sources 
familiar  with  the  company  s 
plans.  Concord  declined  to 
comment,  except  to  deny 
that  the  product  is  called 
PulseCheck. 

Getting  feedback 

These  toots  are  critical  for 
network  managers  trying  to 
monitor  end-user  application 
experiences  and  maintain  ser¬ 
vice  krveis 

Tm  constantly  adjusting  to 
improve  the  response  time  for 
end  users,  but  I  never  see  the 


response  time.'  says  Bob  Brent, 
network  services  manager  at 
Technicolor  in  Camarillo.  Calif. 
Brent  hopes  to  use  NextPoints 
new  software  to  measure  the 
response  time  of  the  com¬ 


pany 's  AS  400  applications  and 
to  find  out  what  kind  of  per¬ 
formance  users  are  gening 
when  they  access  Techni¬ 
color  s  forthcoming  electronic 
commerce  Web  site. 

Brent  says  he  also  hopes  the 
software  w-fll  help  him  trou¬ 
bleshoot  performance  prob¬ 
lems  —  to  determine  if  the 


problems  are  in  a  service  pro¬ 
vider's  network,  on  his  local 
network  or  in  an  application. 
'It  will  give  me  a  due  about 
where  to  look  in  the  process.' 
he  says. 


Riding  a  trend 

The  upcoming  announce¬ 
ments  continue  a  trend  among 
vendors  to  unite  network  and 
application  performance  nun- 
ageroent  in  one  place,  putting 
toother  different  pieces  of  the 
puzzle,  says  Richard  Prak.  vice 
president  of  systems  and  appli¬ 
cation  management  at  Hurwitz 


Group  in  Framingham.  Mass. 

But  application  perfor¬ 
mance  management  is  a  new 
field  and  the  management 
applications  are  still  rather 
immature.  Cheng  Hseih.  net¬ 
work  manager  at  Hoffman- 
LaRouche.  has  been  using 
application  monitoring  soft¬ 
w'are  from  International  Net¬ 
work  Services  for  about  a  year. 
Though  he  finds  the  software 
helpful  for  ensuring  adequate 
user  response  time.  Hseih 
notes  that  building  a  profile 
for  each  application  to  be 
monitored  is  'a  slow  process.' 

The  software  has  to  be  told 
what  applications  to  w~atch 
and  what  baseline  transac¬ 
tions  should  look  like.  If 
the  software  uses  an  .API. 
such  as  Application  Response 
Measurement,  calls  to  that 
interface  need  to  be  written 
into  the  enterprise  applica¬ 
tions  being  monitored. 

Technicolor's  Brent  agrees 
that  some  parts  of  setting  up 
these  systems  can  be  time-con¬ 
suming.  but  he  adds  that  the 
investment  pays  off. 'It's  a  lot 
ot  work  to  get  there,  but  once 
you  do.  you  can  track  down 
problems  in  2  minutes  instead 
of  two  hours.'  he  says. 


more  applications  and  com  :e 
data  concerning  applicant 
performance  with  data  afat 
network  performance.  The  i  w 
version  'helps  pinpoint  pei  >r- 
mance  issues  and  gives  dic¬ 
tion  as  to  whether  they  ann 
the  application  or  in  the  t- 
work.'  says  Bill  Maro.  presit  at 
and  CEO  of  NextPoint. 

Previously,  the  software  t> 
preconfigured  to  monitor  <Jy 
e-mail  and  Domain  N.  ie 
System  applications:  now  it  m 
watch  any  application  tr  ie 
specified  by  network  manat  rs. 

The  software  contain  a 
new  module,  called  Predicve 
Anahst.  which  examines  er- 
fomiance  data  over  time  id 
predicts  future  performs  e. 
For  example,  if  response  ne 
is  increasing  a  certain  ami  mt 
each  month,  the  softv  re 
can  show  what  the  ftnft 
response  time  will  be  il  he 
trend  continues.  This  alt  vs 
network  managers  to 
when  performance  n  ht 
degrade  to  a  point  thai  no 
longer  meets  service-licl 
agreements  (SLV).  Maro  sa*. 

S3  2.0  will  ship  next  w  :k. 
starting  at  $12,000  for  he 
serv  er  softw'are.  which  run  on 
Windows  NT 

NextPoint:  www.nextpnt 
com:  Ganymede:  www.  >ny 
mede.com:  Concord:  vw 
conconi.com 


NextPoints  next  point 

Version  2.0  of  NextPoint  s  S3 
softw'are  will  be  able  to  monitor 


Crystal  ball 


The  new  version  of  NextPoint  s  S3  software  will  measure  and 
predict  application  response  time. 
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Price, 

continued  from  page  10 

access  to  resources  on  the 
intranet  based  on  a  directory 
of  users  and  privileges. 

The  Dascom  tool  kit  lets 
you  retrofit  existing  Web 
applications  for  single  sign- 
on.  Kness  says  his  team  found 
this  is  easiest  when  the  appli¬ 
cation  is  written  in  an  object- 
oriented  style,  such  as  Java, 
C++,  Common  Object  Re¬ 
quest  Broker  Architecture  or 
Distributed  Component  Ob¬ 
ject  Model. 

“With  object-oriented  tech¬ 
nologies,  you  just  have  a 
clearer  framework  to  see 
where  you  add  security  ser¬ 
vices,”  he  says. “Some  are  actu¬ 
ally  easy  to  retrofit.” 

The  third  version  of  Das- 
com’s  IntraVerse  will  debut 
in  October.  The  upgrade’s 
technical  foundation  will 
shift  from  the  Distributed 
Computing  Environment 
(DCE)  model  to  one  based 


on  the  Lightweight  Directory 
Access  Protocol  and  a  set 
of  access-control  services 
called  the  Authorization  APIs. 
According  to  Dascom,  Intra¬ 
verse  3-0  will  scale  up  to 
20  million  users,  as  opposed 
to  a  few  hundred  thousand 
for  DCE. 

In  March,  Dascom  sub¬ 
mitted  the  Authorization 
APIs  to  a  standards  body 
called  The  Open  Group. 
There  the  Authorization  APIs 
have  been  backed  as  a  pro¬ 
posed  access-control  stan¬ 
dard  by  group  members  J.P. 
Morgan,  The  Boeing  Co., 
Hewlett-Packard  and  IBM, 
among  others. 

This  week,  The  Open 
Group  appears  poised  to 
approve  this  set  of  access- 
control  APIs  in  a  final  ballot. 
Using  the  Authorization  APIs, 
application  servers  will  be 
able  to  perform  access  con¬ 
trol,  user  entitlements,  data 
classification  and  data  label¬ 
ing  in  a  more  uniform  way. 


This  way,  corporations  would 
have  a  common  means  to 
define  trust  relationships 
when  crossing  the  threshold 
of  another  corporation’s  net¬ 
works,  whether  authentica¬ 
tion  is  based  on  passwords, 
digital  certificates  or  other 
means. 

T.  Rowe  Price  now  has 
about  10  intranet  applica¬ 
tions  enabled  for  single 
sign-on  by  internal  employees 
or  international  fund  man¬ 
agers.  Kness  says  it  will  use  the 
next  version  of  IntraVerse  this 
fall  to  add  single  sign-on  for 
use  at  the  troweprice.com 
business  portal. 

There,  customers  gain 
access  to  information  about 
mutual  funds,  IRA  accounts, 
brokerage  and  workplace  re¬ 
tirement  services. 

“This  time  next  year  we  ll 
be  in  the  millions  in  terms 
of  integrated  sign-on  for 
our  retail  customers,”  Kness 
claims.  “They  won’t  have  to 
have  multiple  passwords.”  3 


Security, 

continued  from  page  14 

“  [The  administration’s]  plan 
raises  the  Orwellian  possibility 
that  unscrupulous  govern¬ 
ment  bureaucrats  could  one 
day  use  such  a  system  to  read 
our  personal  e-mail,”  Armey 
stated.  He  said  use  of  strong 
encryption  offers  a  way  to  pro¬ 
tect  information  assets.  He 
urged  the  Clinton  administra¬ 
tion  to  fully  disclose  what  the 
intrusion-detection  system  will 
do  before  building  anything. 

Americans  for  Computer 
Privacy  (ACP),  a  group  of 
about  100  companies  and  40 
trade  associations  that  lobbies 
to  lift  encryption  export  rules, 
strongly  condemned  the  FID- 
NET  proposal. 

“Like  the  third-party'  key- 
recovery  plan  advocated  by 
the  FBI,  this  Big  Brother 
approach  to  dealing  with  the 
technological  realities  of  the 
21st  century  is  an  affront  to 
the  constitutional  rights  of 


law-abiding  citizens,”  claims 
Ed  Gillespie,  ACP  executive 
director. 

Among  others  weighing  in 
with  an  opinion  were  Sens. 
Conrad  Burns  (R-Mont.)  and 
Ron  Wyden  (D-Ore.),  who 
crossed  party  lines  to  con¬ 
demn  the  White  House  draft 
plan.  In  a  joint  statement  they 
said:  “We  are  particularly  con¬ 
cerned  that  this  sweeping 
monitoring  system  could  have 
access  to  all  conceivable  vari¬ 
eties  of  electronic  communi¬ 
cations,  including  e-mails, 
remote  log-ins  and  computer 
programs.” 

In  spite  of  the  fact  that  the 
draft  plan  already  has  a 
“Message  from  the  President” 
with  a  statement  attributed  to 
Bill  Clinton  on  it,  National 
Security  Advisor  Sandy  Berger 
last  week  said  it  hasn’t  offi¬ 
cially  been  sent  to  the  presi¬ 
dent.  But  the  NSC  anticipates 
such  a  plan  will  be  officially 
unveiled  around  September 
or  October.  3 


The  WIN-100  system. 

A  wireless  Fasftthernet  system  ciesigned  to  meet 
the  increasing  demands  for  high-bandwidth  data  connectivity 
within  Intranets  and  to  the  Internet . . .  without  the  monthly 
expense  of  leased  lines  or  new  fiber  installation. 

Find  out  more  at: 


635  Vaqueros  Ave.,  Sunnyvale,  CA  94086 
Phone:  (408)  522-8700  Fax:  (408)  522-8706 


Free  Product  info  enter  NWInfoXpress  #11  online  @  www.networkworld.com/infoxpress 
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ADtRAN  delivers 


Cost-effedve  dial  backup 
solutions  r  packet  and 
dedicated  etworks 


V.34  analq,  Switched  56 
and  ISDN  Rl  and 
PRI  option 


Dial  backo  around 
monitoref  rame  Relay 
networks 


Cost-effective  dial  backup  solutions  for 
Frame  Relay  and  dedicated  wide  area  networks 

When  the  circuit  goes  clown,  and  anxiety  starts  rising,  you’ll  remain  calm.  Because 
with  ADTRAN  termination  equipment  in  your  network,  your  connectivity  solution 

includes  comprehensive  disaster  recovery  capabilities.  More 
proactive  than  router-based  recovery  plans  and  more  cost 
„  effective  than  carrier-based  methods,  ADTRAN ’s  dial  backup 

solutions  give  you  exactly  what  you  need  to  prevent  expensive 
~  ^  downtime  and  keep  your  network  operational.  Whether  your 

network  is  packet  or  dedicated,  you're  protected  —  even  on 
monitored  Frame  Relay  circuits.  Modular,  field-installable  dial 
backup  cards  instantly  bypass  an  inoperative  circuit  —  with 
no  technician,  no  lost  time.  Don’t  go  another  day  without  it 

Proactive  disaster  recovery 
sol  at  ions  front  A  DTP  AN 


Protectioffrom  physical 
line,  LMI.rd  PVC  failure 


Availablepr  ADTRAN 
integrate*access 
systems:rame  Relay 
performace  monitoring 
and  acces  devices, 

T1  multipexers,  and 
56ktoTi)SU/CSUs 


Simple,  fild-installable 
cards 


Visit  www.adtran.com/recovery  for  a  free  white  paper  on 

disaster  recovery.  Or,  call  8 7?  399-7541  (toll-free)  and  request 

^  . 


a  free  copy  of  ADTRAN’s  disaster  recovery  brochure 
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■erts  choose  ADTRAN 


NWInfoXpress  '$  :CdW$e; 


ADI  RAN  is  a  registered  trademark  of  ADTRAN.  Inc 
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Devices 


EMC  lastveek  unveiled  en¬ 
hancements)  its  backup  and 
restore  utilityor  users  of  Win¬ 
dows  NT  netrarks. 

The  EMC  bta  Manager  (EDM) 
allows  backus  to  take  place 
directly  from 
disks  to  tapes, 
rather  than  via 
a  server  or 
LAN. 

This  ap¬ 
proach  can 
relieve  servers 
of  extra  pro¬ 
cessing  and 
LANs  of  extra 
network  traffic. 
EMC  has  sup¬ 
ported  these 
types  of  back¬ 
up  on  Unix  for 
the  past  two  yars. 

The  EDM  bckup  and  restore 
software  and  tirdware  can  be 
configured  in  iree  ways:  EDM 
Symmetrix  Conect,  EDM  Sym- 
metrix  Path  an  EDM  Enterprise 
Network. 

EDM  Symmtrix  Connect  pro¬ 
vides  serverlesand  LANIess 
backup  from  die  to  tape  for  NT 
and  Unix. 

EDM  Symmeix  Path  provides 
LANIess  backuand  recovery  of 
NT  and  Unixfodata  stored  on 
EMC  Symmetrixiisk  subsystems 
as  well  as  for  m-Symmetrix 
data.  EDM  Enteirise  Network 
backs  up  and  rttores  data 
across  NT,  Neftare  and  OS/2 
nets. 

EMC  was  unale  to  provide 
pricing  informabn  by  press  time. 

EMC:  www.eic.com 

Allied  Telesyitnternational  of 

Sunnyvale,  Califhas  unveiled  an 
Ethernet  adaptenetwork  inter¬ 
face  card  that  pigs  directly  into 
a  desktop  compier's  Universal 
Serial  Bus  port.  Te  AT-USB  10 
card,  which  is  ht  swappable, 
costs  $70. 

Allied  Telesyi  www.allied 
telesyn.com 


EMC's  back¬ 
up  and  re¬ 
store  utility 
for  Windows 
NT  and  Unix 


Inf rastructu 

_  TCP/IP,  LA N/WA N  Switches ,  Routers,  Hubs,  Access 

Clients,  Servers,  Operating  Systems,  VPIVs,  Networked  Storage 

IBM  makes  enterprise  storage  bid 


BY  MARC  SONGINI 

NEW  YORK  —  IBM  last  week  launched 
a  fresh  assault  on  the  enterprise  storage 
market  by  announcing  a  product  that 
observers  say  stands  out  because  of  its 
aggressive  price  and  huge  capacity. 

The  company  largely  ceded  the  high- 
end  disk  array  server  market  to  storage 
industry  leader  EMC  several  years  ago  and 
has  been  reselling  products  made  by 
Storage  Technology  ever  since.  But  with 
its  new  Enterprise  Storage  Server,  code- 
named  Shark,  IBM  is  looking  to  take  a  big 
bite  out  of  EMC’s  business. 

IBM  is  recommitting  to  the  enterprise 
storage  market  in  anticipation  of  the  busi¬ 
ness  taking  off  as  companies  move  ahead 
with  aggressive  e-business  plans,  says  Ron 
Kilpatrick,  general  manager  of  IBM’s  stor¬ 
age  division.  E-business  applications  will 
generate  a  lot  of  customer,  inventory  and 
other  data  that  needs  to  be  stored  effi¬ 
ciently  and  retrieved  easily,  he  says. 

IBM’s  new  product  is  designed  so  stor¬ 
age  capacity  can  be  added  as  needed  up  to 
11.2  terabytes.  Enterprise  Storage  Server, 
based  on  multiple  Reduced  Instruction 
Set  Computing  processors,  will  handle 
storage  chores  for  S/390  mainframes  and 
AS/400  midrange  computers,  as  well  as  for 


Compaq  14.6% 


EMC  22.5% 


Unix  and  Windows 
NT  machines. The  IBM 
product  will  support 
multiple  interfaces,  in¬ 
cluding  Enterprise  Sys¬ 
tems  Connection  and 
Ultra  SCSI. 

And  what  will  one 
of  these  IBM  servers 
cost?  About  $3  million. 

That  may  sound  like  a 
lot,  but  analysts  say  a 
high-end  EMC  Symme¬ 
trix  box  will  typically 
cost  twice  as  much. 

EMC  doesn’t  seem 
too  concerned,  noting 
that  IBM’s  product  still 
won’t  be  available  for 
awhile  and  claiming 
that  the  product  lacks  key  features,  such 
as  native  Fibre  Channel  connectivity.  “We 
prefer  to  compete  with  real  products,”  an 
EMC  official  says.  “This  is  based  on  hype.” 

Meanwhile,  IBM  has  ticked  off  partner 
StorageTek.The  new  IBM  product  replaces 
IBM’s  RAMAC  Virtual  Array,  which  is 
licensed  from  StorageTek.  StorageTek  says 
the  move  will  hurt  IBM  in  that  IBM  will  no 
longer  be  able  to  offer  StorageTek’s  virtu¬ 
al  storage  technology  and  will  not  have  its 


A  new  shark  in  the  storage  waters 

IBM  hopes  its  Enterprise  Storage  Server  — 
code-named  Shark  —  will  give  the  company 
a  stronger  presence  in  the  external  RAID 
system  market. 


1998  worldwide  external  RAID  system 
revenue  market  share: 


A 


IBM's  new  storage  server 
can  hold  more  than  11 
terabytes  of  data. 


IBM  9.5% 


\ 


Total  market: 

$14.1  million 

SOURCE:  IDC,  FRAMINGHAM.  MASS. 


Sun  7.9% 

Hewlett- 

Packard 

7.1% 


Other  38.4% 


own  version  of  virtual  storage  technology" 
ready  until  next  year.  Among  other  things, 
virtual  storage  technology  optimizes  the 
use  of  space  on  storage  disks. 

But  even  without  virtual  storage  from 
the  start,  IBM’s  product  should  attract  cus¬ 
tomer  interest,  says  Mike  Kahn,  an  analy  st 
at  the  Clipper  Group,  a  Wellesley,  Mass., 
consulting  firm.  “The  bottom  line  is:  IBM 
will  do  whatever  it  takes  in  a  fiercely  com¬ 
petitive  market,”  he  says.  3 


Winternals  sending  relief  to  server  crash  sites 


Remote  recovery  tool  lets  network  administrators  revive  downed  Windows  NT  machines. 


BY  JOHN  FONTANA 

AUSTIN,  TEXAS  —  With  server  crashes 
achieving  occupational  hazard  status,  util¬ 
ity  vendor  Winternals  Software  has  come 
up  with  a  recovery  utility  for  administer¬ 
ing  to  ill  Windows  NT  machines. 

The  company  has  begun  shipping 
Remote  Recover,  which  lets  administra¬ 
tors  repair  NT  File  System  (NTFS)-based 
systems  throughout  a  network  from 
another  NT  machine  that  functions  as  a 
host.  Remote  Recover  allows  the  host 
machine  to  take  over  a  downed  server 
and  bring  it  back  up. 

The  utility  uses  TCP/IP  to  create  a  con¬ 
nection  between  the  host  and  a  crashed 
server  after  the  server  has  been  booted 
from  an  MS-DOS  floppy  disk.  Once  the 
connection  is  made,  Remote  Recover  lets 
administrators  virtually  mount  NTFS  and 
File  Allocation  Table  (FAT)  drives  from  the 


Mo,e0nline 

•  Download  a  trial  version  of  Remote 
Recover. 

•  Download  other  demo  and  evaluation 
NT  administration  tools. 


crashed  server  onto  the  host  machine. 

The  mounted  disks  appear  to  be  local 
to  the  host  machine,  and  an  administra¬ 
tor  can  repair  the  server  operating  sys¬ 
tem  and  recover  files. 

“Any  tool  that  can  be  use;d  on  the  host 
machine  can  be  used  on  the  remote 
machine,”  says  Bryce  Cogswell,  chief 


technology  officer  of  Winternals  and  co¬ 
creator  of  the  product.  Remote  Recover 
allows  hard-disk  administration  software, 
which  typically  runs  only  on  a  local  NT 
system,  to  execute  over  the  network  — 
even  on  a  server  that  no  longer  has  a 
functioning  operating  system  installed. 

Administrators  can  edit,  copy  and 
delete  files;  copy  files  or  partitions  among 
all  the  machines  on  a  network;  partition 
and  format  disks  as  either  NITS  or  FAT; 
and  restore  files  or  entire  disks  from  tape 
backup. 

Microsoft  includes  an  Emergency 
Repair  Disk  in  its  NT  Resource  Kit,  but 
this  tool  does  not  let  administrators 
troubleshoot. 

Remote  Recover  runs  on  NT  4.0  and 
requires  a  copy  of  MS-DOS  4.0  or  higher 
booted  to  the  crashed  server.The  software 
is  priced  at  $300  and  is  available  for  down¬ 
load  from  www.wintemals.com.  Li 
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/N-SITE:  Lessons  from  Leading  Users 


Widener  University  has  the  urge  to  converge 


BY  JIM  DUFFY 

Voice/data  convergence  is  being 
tested  at  Widener  University  in 
an  ambitious  project  designed  to 
meld  several  disparate,  applica¬ 
tion-specific  networks  into  one. 
Currently  installed  at  the  uni¬ 
versity  is  a  voice-over-ATM  net  that 
saves  the  institution  at  least  S  10,000 
per  month  in  circuit  and  long-distance 
charges.  Widener  also  supports  dis¬ 
tance  learning  by  'Webcasting"  classes 
across  campus.  If  students  cannot  make 
it  to  class,  they  can  tune-in  to  a  live 
multicast  or  view  a  recorded  session 
through  their  Web  browser. 

But  Widener  has  even  bigger  plans 
for  its  convergence  project.  The  school 
is  currently  in  the  initial  stages  of  over¬ 
laying  Ethernet-  and  IP-based  voice  and 
videoconferencing  on  its  ATM  net  And 
some  other  smaller,  specialized  net¬ 
works.  such  as  the  university's  security 
system,  are  also  now  running  over  the 
packet-  and  cell-based  data  network. 

“Convergence  is  bigger  than  voice, 
video  and  data."  says  Gary  Habermann, 
Wideners  director  of  network  opera¬ 
tions.  “There  are  a  lot  of  oddball  little 
networks  out  there." 

Indeed  there  are,  and  if  Habermann 
has  his  way.  they'll  all  be  swallowed  up 
by  Widener  s  data  network,  which  fea¬ 
tures  ATM  in  the  core  and  Ethernet  at 
the  edge.  Voice  has  ahead}'  been  swal¬ 
lowed  up. 

Widener  has  replaced  four  to  six 
leased  T-l  circuits  by  connecting  two 
AT&T  PBXs  to  the  ATM  network,  which 
supports  circuit  emulation. That  combi¬ 
nation  gives  Widener  free  long-distance 


calling  between  its 
Chester,  Pa.,  and  Dela¬ 
ware  campuses,  but 
the  real  savings  —  the 
S  10,000  per  month  — 
comes  from  eliminat¬ 
ing  those  T-ls.  Haber¬ 
mann  says. 

“It's  a  lot  of  money;" 
he  says.  “It’s  a  good 
way  to  win  friends  in 
the  administration." 

Another  administra¬ 
tion-friendly  applica¬ 
tion  is  Webcasting. 

Video  cameras  in  class¬ 
rooms  record  the 
classes,  which  can  be 
virtually  attended  by 
students  via  live  or 
recorded  multicast  to 
their  Web  clients. 

Multicasting  entire 
classes  may  seem  like  a 
waste  of  bandwidth, 
but  a  single  multicast  to  500  students 
only  takes  up  "DOK  bit/sec  of  band¬ 
width,  Habermann  says. 

Widener  has  some  other  conver¬ 
gence  goodies  cooking  in  its  lab.  The 
school  is  testing  videoconferencing 
over  Ethernet  using  Polycom  video- 
conferencing  gear  and  an  H.323-to- 
ISDN  gateway  from  RADMsion. 

H.323  is  a  standard  for  multimedia 
over  frame-  and  packet-based  net¬ 
works.  Wideners  videoconferencing 
trial  is  evaluating  classroom-to-class- 
room  and  campus-to-campus  video- 
conferencing  at  384K  bit/sec  over 


ISDN  WAN  circuits. 

Yoice-over-EP  has  just  graduated  from 
the  lab.  The  school  is  beginning  to  uti¬ 
lize  some  IP  phones  based  on  3Com’s 
XBX  100  voice-over-IP  switch.  Widener 
wants  21  members  of  its  technical  staff 
to  be  using  the  IP  phones  by  the  end  of 
the  summer.  Habermann  says. 

Each  NBX  switch  supports  140 
phones  and  is  connected  to  Widener  s 
data  net  via  10M  bit/sec  Ethernet.  The 
XBX  switches  are  also  connected  to 
Widener  s  PBXs  via  two  plain  old  tele¬ 
phone  service  (POTS')  lines. 

Each  voice-over-IP  phone  requires  a 


200K  bit/sec  connection  for  “voice 
quality"  and  users  can  have  voice  mail 
and  conferencing  features  for  a  fraction 
of  the  cost  erf  a  circuit-switched  offer¬ 
ing.  Habermann  says.  For  instance,  a 
POTS  handset  costs  Widener  $1,500, 
vs.  an  NBX  handset  for  $350.  Upgrading 
a  b4-phone  PBX  costs  $200,000,  vs. 
542.000  for  a  64-phone  NBX  upgrade, 
Habermann  says. 

Still,  voice  over  IP  has  some  matur¬ 
ing  to  do. 

“It  will  be  a  while  before  we  get  rid 
of  the  PBX.  but  we  won’t  grow  it  any¬ 
more."  Habermann  says.  Jk 


SGI  makes  foray  into  Intel  server  market 


Company  adds  Linux  and  Windows  XT  sort  ers  to  its  product  mix. 


BY  DENI  CONNOR 

MOUNTAIN  MEW  CALIF.  — 
SGI,  formerly  Silicon  Graphics, 
this  week  will  introduce  its 
first  Intel-based  servers,  a 
move  designed  to  keep  the 
company's  customers  from 
going  elsewhere  to  buy  low  er- 
end  machines. 

The  company  is  best 
known  for  its  powerful  Origin 
2000  Unix  servers  and  super¬ 
computers.  which  are  used 
largely  in  technical  comput¬ 


ing  environments.  SGI  is  used 
to  its  customers  buying 
lower-end  machines  from 
other  vendors.  But  with  the 
new  32-bit  Intel-based 
servers,  which  run  Windows 
NT  or  Linux,  SGI  can  offer 
customers  a  wider  range  of 
network  servers. 

SGI  has  no  illusions  about 
making  a  huge  splash  in  the 
Intel  server  market  with  its 
new  1400  series  machines, 
though  the  company  does 
think  customers  will  find  its 


new  machines  attractive  as 
Web  servers  and  proxy 
servers. 

The  company  isn’t  claiming 
that  its  Intel  servers  are  tech¬ 
nically  very  different  from 
competing  machines. 

How  ever.  SGI  has  priced 
the  servers  competitive!}'  at 
roughly  S  13.600  for  a  machine 
with  four  Pentium  III  Xeon 
processors.  512M  bytes  of 
cache.  256M  bytes  of  RAM  and 
a  9G-byte  disk. 

SGI  plans  to  introduce  two 


and  eight-processor  models 
over  the  next  12  months. 

Customers  seem  intrigued 
by  the  new  prod¬ 
ucts.  particularly  the 
Linux  machine. 

“As  a  Linux  envi¬ 
ronment.  we  are 
very  interested  in 
SGI  low-cost  Linux 
machines."  says  Don 
Holmgren,  a  com¬ 
puter  professional  at 
Fermi  Lab.  a  Depart¬ 
ment  of  Energy 
facility  in  Batavia. 

111.,  that  has  beta- 
tested  the  new  SGI 
l-inux  server. 

“SGI  has  made  a  bigger 
commitment  to  Linux  than 
other  vendors."  Holmgren  savs. 


The  new  Linux  mach  e 
should  also  jump-start  a 
broader  Linux  effort  it 
SGI,  says  Dad 
Witzel,  an  n- 
lyst  with  D  I. 
Brown  in  Id 
Chester,  N.Y. 

He  says  e 
new  Linux  s*  v- 
er  will  give  >1 
the  Linux  kn  v- 
ledge  it  dl 
need  to  get  n 
integrated  r- 
sion  of  Lii  ix 
and  SGI's  ix 
operating  s- 
tem  running  on  Intel  s  6  ’it 
Merced  processor  whei  it 
arrives  next  year. 

SGI:  www.sgi.com 


SGI's  new  1400  server 
line  comes  in  Linux  and 
NT  versions. 
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Wired  Windows 
Dave  Kearns 

Which  port 

IN  THIS  STORM? 


ber).  Well,  which  was  it?  Neither  made 
much  sense. 

A  call  to  Novell  —  to  someone  familiar 
with  the  situation  —  revealed  that  the 
real  reason  for  the  confusion  was  that 
IBM  wanted  Novell  to  rewrite  the  pro¬ 
gramming  code  as  a  NetWare  Loadable 
Module  for  free.  It  wasn’t  that  Novell 
was  blocking  a  “port”  (socket),  or  that 


NetWare  didn’t  allow  access  to  a  “port” 
(I/O  buffer),  but  that  IBM  wanted  Novell 
to  “port”  (rewrite  the  program)  Release 
5.0,  gratis!  That’s  a  big  difference. 

People  who  heard  only  the  first  or 
second  explanation  would  be  mightily 
miffed  at  Novell  for  what’s  perceived  to 
be  a  dumb  move  —  blocking  the  release 
of  Domino  5.0  for  NetWare.  People  who 


dug  deeper  into  the  controversy,  though, 
know  where  to  point  the  finger.And  it  all 
hinged  on  the  meaning  of  one  word. 

Get  Kearns’  free  Windows  NT 
newsletter  via  e-mail  twice  a  week. 
Go  to  www.nwfusion.com/focus/ 
index.html  and  sign  up  for  the  latest 
NT  news. 


oveli  recently  announced  avail¬ 
ability  of  its  Single  Sign-on  —  a 
directory-based  package  that  eliminates 
the  need  for  users  to  remember  multiple 
passwords.  The  software  lets  them  log 
on  to  the  computer  network  once  and 
access  a  variety  of  applications  across 
multiple  platforms.  Alongside  Novell’s 
announcement  was  one  from  Lotus  de¬ 
claring  support  for  Single 
Sign-on  for  its  Domino 
servers  and  Notes  client. 

This  reminded  me  of 
the  brouhaha  surround¬ 
ing  the  announcement 
that  Lotus’  newest  re¬ 
lease  of  Domino,  5  0, 
would  not  be  available 
on  the  NetWare  platform.  Trying  to  get 
to  the  bottom  of  the  decision  led  to  an 
exercise  in  semantics. 

Here’s  what  happened:  A  user,  trying 
to  find  out  if  Release  5.0  would  ship  for 
NetWare,  called  his  service  provider. The 
service  representative  checked  with 
Lotus  and  called  back  a  couple  days  later 
to  report  that  “Novell  would  not  allow 
Domino  access  to  a  required  port  for  the 
Domino  server.”  “Port”  in  this  case  is 
understood  to  be  a  particular  IP  socket, 
which,  when  combined  with  a  network 
address,  is  called  a  port. 

The  user  found  this  hard  to  believe. 
Release  4.0  had  run  on  NetWare,  and  he 
couldn’t  believe  Lotus  had  changed  the 
port  numbers  the  company  was  using 
for  access.  Nor  could  he  believe  that  Net¬ 
Ware  suddenly  required  Lotus’  port  num¬ 
ber  for  some  other  activity;  port  num¬ 
bers  can  be  virtually  anything,  as  long  as 
the  client  and  server  agree  on  them. 

Not  content  with  the  answer,  the  user 
contacted  IBM,  Lotus’  parent  company. 
IBM  said  “the  NetWare  platform  doesn’t 
allow  access  to  a  particular  I/O  port  on 
the  system.”  So  the  problem  was  with  an 
I/O  port  (part  of  the  system  BIOS) 
rather  than  an  IP  port  (a  socket  num- 
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If  you're  not  conversant 
with  XML,  you'd  better 
get  a  good  book  and  start 
reading.  Microsoft  and  Novell  have 
agreed  that  XML  will  be  the  basis  of 
Directory  Services  Markup  Language,  the 
language  that  will  be  used  by  directory 
systems  to  exchange  information. 


Forget  about  compromises.  Kasten  Chase  can  help  you  migrate  to  a  Web- 
based,  Windows-based  network  easily  and  securely— no  matter  how  many  mainframes, 
applications,  databases  or  demanding  users  you  have.  And  our  Try  Before  you  Buy  program 
lets  you  try  out  our  Versa  Path'"  Web-to-Host  solutions  absolutely  free,  no  strings  attached. 


Visit  us  at  www.versapath.com  or  call  1-800-263-1448.  Sometimes,  the  easy  way  is  the  best  way. 

Free  Product  info  enter  NWInfoXpress  #9  online  @  www.networkworld.com/infoxpress 


Stackable  Switches  &  Switching  floor. 

Fastlron  Workgroup  &  Backbone  Switches 
Netiron  Switching  Router 
Turboiron/8  Switch  &  Switching  Router 


Serverlron  Server  Load  Balancin 
and  Transparent  Caching  Switch 


Fastlron  II  Wiring  Closet  Switch 


Biglron  4000  Switch  &  Switching  i  itt 


Biglron  8000  Switch  &  Switching  Jit 


Whenever  top-tier  ISPs  like  AOL*,  Yahoo!1  and  MindSpring1  cry  out  for 
maximum  speed,  we  heed  their  call.  When  enterprises  like  First  Union 
National  Bank,  LTV  Steel  and  CarnivaF  Cruise  Lines  grasp  for  reliability, 
we  leap  to  the  rescue.  And  when  organizations  like  the  University  of 
Southern  California  and  the  National  Institutes  of  Health  search  the 
world  for  price  and  performance,  we  arrive  just  in  time. 

We're  Foundry  Networks.  And  we've  got  powers  no  one  else  can  match. 
For  starters,  we  re  the  only  vendor  to  offer  super-fast  10/100  and  Gigabit 
Ethernet  switches  for  Layers  2, 3,  and  4-7 — all  totally  integrated.  Plus 
Packet  Over  SONET  WAN  links.  That's  product  breadth  from  the  network 
edge  to  its  core. 

Then  there's  our  super  feature  set.  Integrated  multi-protocol  wire-speed 
routing  and  application-aware  Layer  4-7  switching.  Plus  64  port  Gigabit 


Ethernet  density  at  up  to  96  Mpps  for  maximum  investment  protection 
and  flexibility. 

Yes,  we've  won  multiple  awards  for  product  and  corporate  excellence, 
but  we're  not  in  this  business  for  the  praise.  We're  in  it  to  give  our 
customers  IronClad  Network  Performance.  Does  that  make  us  super¬ 
heroes?  We  don't  know.  But  our  customers  might 

Visit  www.foundrynetworks.com/turboman  for  a  hot  deal  on  our  hot 
products.  Or  call,  1-888-TURBOLAN  (887-2652). 

phone:  408.530.3300 
visit  www.  foundrynetworks.  com 
email:  infogfoundrynet.com 
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GVN  Technologies  last  week 
introduced  D'Lite  440,  a  multi¬ 
service  access  platform  that 
aggregates  all  voice  and  data 
traffic  from  a  single  site  onto 
the  same  dedicated  WAN  link. 


GVN’s  D'Lite  440  could  save  you 
money  with  SDSL. 


D'Lite  440  can  connect  to  T-1  or 
symmetric  digital  subscriber  line 
(SDSL)  WAN  circuits.  Analysts 
say  competitive  local  exchange 
carriers  could  use  the  box  to 
offer  voice  and  data  services 
over  SDSL,  a  less  expensive 
option  than  T-1  services  from 
traditional  carriers. 

GVN:  www.gvntech.com 

A  trade  association  of  state 
telecom  regulators  is  recom¬ 
mending  that  states  not  force 
any  new  hardware  or  software 
requirements  on  carriers  until 
the  Y2K  problem  has  passed.  The 
National  Association  of  Reg¬ 
ulatory  Utility  Commissioners 
passed  the  resolution  at  its  sum¬ 
mer  meeting  in  San  Francisco. 
The  resolution  even  says  states 
should  forgive  deadlines  on  cur¬ 
rent  regulatory  changes  if  carri¬ 
ers  need  to  concentrate  re¬ 
sources  on  Y2K. 

Last  week  iPass  guaranteed 
100%  availability  for  its  Internet 
access  dial-up  network.  IPass  is  a 
consortium  of  ISPs  that  lets  each 
other's  customers  access  their 
local  points  of  presence  so  iPass 
customers  can  travel  the  world 
and  access  the  'Net  via  a  local 
phone  call. 

The  company  also  announced 
it  is  building  a  list  of  virtual  private 
network  gear  that  is  compatible 
with  iPass  net  security. 

iPass:  www.ipass.com 
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Enron  building  bandwidth  the  IP  way 


BY  DENISE  PAPPALARDO 

PORTLAND,  ORE.  —  When  you  hear 
the  word  “commodity,”  you  probably 
think  of  pork  bellies  or  orange  juice. 
When  executives  at  Enron  Com¬ 
munications  use  that  word,  however, 
they  are  talking  about  bandwidth. 

Enron  Communications,  a  wholly 
owned  subsidiary  of  energy  company 
Enron  Corp.,  is  in  the  process  of  building 
a  network  that  will  span  15,000  route 
fiber  miles.  While  the  company  is  break¬ 
ing  ground  and  dropping  its  own  fiber¬ 
optic  cables,  Enron  is  also  swapping 


BY  TIM  GREENE 

America  Online  is  becoming  a 
driving  force  behind  the 
deployment  of  ADSL. 

In  separate  agreements,  AOL  has 
recently  committed  to  wholesaling  asym¬ 
metric  digital  subscriber  line  from 
Ameritech  and  GTE  for  the  purpose  of 
reselling  it  packaged  with  Internet  access. 

The  AOL  deal  with  Ameritech  is  big 
enough  to  move  Ameritech  s  DSL  deploy¬ 
ment  from  on-hold  to  active,  with 
Ameritech  promising  to  equip  its  switch¬ 
ing  offices  in  Illinois,  Indiana,  Michigan, 
Ohio  and  Wisconsin  with  ADSL  gear. 

Ameritech’s  ADSL  business  plan 
called  for  wholesaling  the  service,  but 
the  carrier  first  wanted  to  clear  up  regu¬ 
latory  concerns  about  leasing  parts  of  its 


bandwidth  with  other  providers,  such  as 
Frontier  Communications,  to  get  band¬ 
width  turned  on  in  areas  where  Enron 
has  no  coverage. 

Enron  isn’t  paying  millions  of  dollars 
for  this  bandwidth.  The  company  is 
instead  trading  some  of  its  own  network 
capacity.  This  is  believed  to  be  an  eco¬ 
nomical  way  to  get  nationwide  coverage 
up  and  running  quickly,  especially  for  new 
service  providers.  However,  it  remains  to 
be  seen  whether  this  bandwidth  swap¬ 
ping  will  lead  to  lower  rates  for  business 
users  or  merely  pad  Enron’s  bottom  line, 
says  Lisa  Pierce,  an  analyst  with  Giga 


network  to  other  carriers. 

The  AOL  deal  gave  Ameritech  a  big 
enough  wholesale  customer  to  resolve 
those  concerns. 

The  AOL-GTE  deal  will  increase  the  vis¬ 
ibility  of  ADSL  in  GTE’s  coverage  region. 
GTE  currently  provides  ADSL  in  parts  of 
17  states  across  the  U.S.,  including 
Washington,  Oregon,  California,  Florida, 
Hawaii  and  Texas. 

Ameritech  later  this  year  will  also 
wholesale  cable  modem  service  to  AOL  in 
Chicago  for  high-speed  Internet  access 
packages.  Ameritech.net  will  sell  cable 
modem  Internet  access  over  the  same  net¬ 
work,  proving  it  is  technically  feasible  for 
more  than  one  company  to  sell  cable 
modem  service  over  the  same  network. 

GTE:www.gte.com;  AOL:  www.aol. 
com;Ameritech:  www.ameritech.com 


Information  Group  in  Cambridge,  Mass. 

More  clear  is  that  bandwidth  swap¬ 
ping  will  allow  Enron  by  the  end  of  2000 
to  build  a  nationwide  network  that  will 
be  used  to  offer  its  application  hosting 
services.  Enron  is  already  offering  its 
ePowered  Media  Cast  streaming  video 
service.  The  service  provider  plans  to 
add  enterprise  resource  management 
and  other  applications  specific  to  cer¬ 
tain  industries,  says  James  Crowder,  vice 
president  of  strategic  development. 

In  order  to  subscribe  to  any  of  Enron’s 
services,  enterprise  business  users  will 
have  to  buy  them  through  ISPs  that  have 
teamed  with  Enron,  such  as  USinternet- 
working.  Enron  expects  to  deal  with  sev¬ 
eral  national  and  regional  ISPs  that  will 
essentially  wholesale  application  service 
provider  services  from  Enron. 

By  year-end,  the  majority  of  network 
segments  that  are  under  construction  will 
be  up  and  running,  except  the  one  from 
Houston  to  New  Orleans  (see  graphic). 
The  majority  of  Enron’s  network  is  oper¬ 
ating  at  OC-3  (155M  bit/sec).  The  com¬ 
pany  is  in  the  process  of  upgrading  eight 
cities  —  Portland,  San  Jose,  Los  Angeles, 
Dallas,  Houston,  Chicago,  New  York  and 
Washington  —  to  OC-12  (622M  bit/sec), 
to  be  completed  by  year-end. 

Unlike  other  net  newcomers,  such  as 
Qwest  Communications  and  Level3  Com¬ 
munications,  Enron  isn’t  using  transport 
technologies,  such  as  ATM  or  frame  relay; 
Crowder  says.  Enron  is  deploying  IP  over 
dense  wave  division  multiplexing,  which 
lets  a  service  provider  get  16  to  32  times 
more  capacity'  out  of  each  strand  of  fiber. 
In  the  short  term,  this  means  Enron  will 
not  be  supporting  any  voice  services 
because  toll-quality  voice  cannot  be  sup¬ 
ported  over  a  nationwide  network  today. 
But  Crowder  says  Enron  and  its  customers 
will  benefit  from  a  pure  IP  backbone  net¬ 
work  in  the  long  run.  3 


"•‘Online 

•  More  details  on  the  Enron  network 
and  applications. 

•  A  look  at  a  new  global  bandwidth 
brokerage  service. 
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IP  it  is  for  Enron 

Enron  Communications  is  in  the  process  of  building  a  pure  IP  nationwide  backbone. 
Pure  IP  means  no  ATM  switching  core.  This  network  is  being  built  using  high-speed 
routers  from  Cisco.  Enron's  network  is  expected  to  be  complete  by  2002. 
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Wan  Monitor  .  Daniel  Briere  and  Christine  Heckart 

Iake  a  30-day  timeout  or  risk  ‘eBay  black  eye’ 


Bay's  much-publicized  multiday 
system  crash  and  service  outage 
continues  to  cause  sleepless  nights  for 
manv  individuals  .  .  .  not  all  of  whom 


work  for  eBay. 

IT  executives  and  electronic  com¬ 
merce  managers  throughout  the 
Internet  community  are  constantly 


wondering  whether  their  e-commerce 
platforms  could  crash  and  tag  them 
with  an  "eBay  black  eye.”  Funny  thing 
is.  most  of  these  executives  already 


It's  likely  even  the  most  experienced  IT  profession¬ 
al  doesn't  know  all  the  potential  power  threats  —  from 
subtle  distortions  that  damage  data,  to  full-blown 
blackouts  that  shut  down  a  business. 

And  if  you  don't  have  the  level  of  protection  that 
matches  your  applications,  you  could  get  burned. 

Powerware  protects  everything  from  desktop 
computers  to  enterprise-wide  networks.  And  our 
unique  product  line-up  makes  it  easy  to  choose  the 
best  solution:  Series  3  for  the  three  most  common 
power  threats,  including  failures,  surges  and  sags; 


Series  5  for  mid-  to  high-level  protection;  and  Series  9 
for  the  broadest  protection  —  recommended  for  the 
most  mission-critical  operations. 

What's  more,  we'll  help  you  determine  the  level  of 
power  protection  you  need.  And  our  unmatched  moni¬ 
toring  and  shutdown  software  and  on-site  support 
make  Powerware  the  most  reliable,  hassle-free  UPS 
solution  you  can  find. 

To  learn  more,  visit  www.powerware.com/3-5-9. 
Or  call  us  at  877-PWRWARE  (877-797-9273).  Before 
the  sun  sets  on  your  systems. 


POWERWARE 

POWERING  THE  WORLD 

Free  Product  info  enter  NWInfoXpress  #6  online  @  www.networkworld.com/infoxpress 


know  what  needs  to  be  done. 

If  they  really  want  to  sleep  at  night 
those  responsible  for  strategic  e-com 
merce  platforms  should  implement  the 
same  operating  procedures,  systen 
requirements,  backup  plans  and  net 
w  ork  policies  that  exist  for  their  inter 
nal  mission-critical  systems. 

Reading  through  the  press  surround 
ing  the  eBay  system  crash,  two  obviou 
problems  stand  out.  The  first  was  th< 
lack  of  a  hot  standby  swap-over  system 
The  second  was  that  eBay  servers  ha. 
not  been  updated  to  the  most  recen 
version  of  the  Sun  operating  system. 

Quotes  from  eBay  technical  peopl 
indicate  the  standby  system  was  almos 
reach-  but  not  quite  functional.  Stii 
they  pressed  on  with  massive  syster 
changes  and  nothing  more  than  a  fe\ 
backup  tapes  standing  between  ther 
and  disaster.  As  weary  and  worn  ind 
vi  duals  responsible  for  strategic  ente: 
prise  networks,  we  all  understand  th< 
importance  of  hot-swappable  standb 
systems.  All  too  often  though,  thos 
controlling  the  dollars  do  not  shar 
that  level  of  concern. 

Some  believ  e  the  Internet  is  “all  ne\ 
and  different"  and  runs  by  a  separat 
set  of  more  lenient  rules  and  on  a  di 
ferent  time  clock.  We  don't  buy  tha 
premise.  If  anything,  executives  shoul 
use  the  eBay  crash  and  publicity  it  gei 
eruted  to  slow  down,  even  if  tempora 
ily.  their  e-commerce  system  upgrade 
Demand  the  money  and  resources  t 
deploy  a  hot  standby  system  and  Stic 
to  your  guns. 

Using  scare  tactics  to  get  resource* 
should  not  be  standard  procedure,  t 
course.  Fortunately,  the  wave  of  pre: 
coverage  concerning  the  eBay  outa 
makes  our  suggestion  seem  less  like 1 
scare  tactic  and  more  like  good  bus 
ness  sense.  Make  certain  vour  CEO 
and  board  members  see  the  stori< 
concerning  what  eBay  lost  in  hard  dt 
lars.  stock  value  and  customer  loyalty 

While  you  have  their  attention,  pu; 
for  commitments  and  resources 
implement  a  plan  that  includes  deb 
ing  all  new  system  enhancements 
order  to  spend  30  days  on  a  full  e-coi 
merce  system  review.  During  this  tin 
vou  can  ensure  tout  e-commerce  set 
rity  is  as  bulletproof  as  it  can  be,  yo 
server  operating  systems  are  up  to  tl- 
correct  version  levels,  patches  ha 
been  tested  and  rolled  out,  back' 
plans  have  been  tested  and  the  h: 
standbv  svstems  work.  You  can  also  u 
these  30  davs  to  promote  your  systti 
review  to  your  e-commerce  custome 

You  hav  e  two  choices.  Strike  wh  ‘ 
the  embers  of  the  eBay  crash  are  ft, 
or  continue  to  down  those  sleepif 
pills. 


Briere  is  president  and  Heckart  t 
rice  president  of  TeleCboice,  a  const 
fancy  in  Boston.  They  can  be  reaebi 
at  dbriere&telecboice.  corn  atl 
clH\kartSteiecboice.conu 
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Whoever  called  the 
unknown  “great” 
never  managed  a 
corporate  network. 
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Introducing 

The  Symantec  Digital  Immune  System 

As  enterprises  extend  beyond  four  familiar  walls  in  search  of 
greater  productivity,  each  system  is  exposed  to  new  potential 
problems.  Connect  all  those  potential  problems,  add  the  Internet, 
and  you  begin  to  sense  the  scope  of  the  threat  to  the  network, 
and  those  responsible  for  it. 

To  deal  with  the  known  and  unknown  threats  to  productivity 
inherent  in  today’s  corporate  IT  environment,  Symantec  has  devel¬ 
oped  a  Digital  Immune  System.  This  integrated  package  of  best-of- 
breed  solutions  can  not  only  protect,  but  instantly  respond  to  a  range 
of  threats  to  the  network,  before  they  become  serious  problems.  A 
suite  of  intelligent  tools  to  keep  systems  at  peak  performance,  the 
Symantec  Digital  Immune  System  finally  gives  IT  what  it  needs  to 
succeed  in  the  face  of  growing  demands,  limited  resources  and  the 
not-so-great  unknown. 


SYMANTEC. 


Call  us  at  1-800-745-6054,  ext.  9NK1 
or  visit  www.digital-immune-system.com 

for  information  and  a  FREE  Digital  Immune  Systrn  CD  ROM. 


If  your  Internet  telephony 
supplier  doesn’t  have  serious 
telephony  experience,  you  may  not 
be  happy  with  the  results. 


Nortel  Networks™  introduces  Inca™  next-generation  Internet  telephony.  We’re 
changing  the  way  businesses  communicate  by  bringing  the  world  of  data  and  voice 
together  as  only  we  can.  This  next  era  of  networking  is  built  on  Inca,  anew  product 
portfolio  based  on  our  Internet  Communications  Architecture,  which  utilizes 
open  standards.  Whether  you're  evolving  your  current  network  or  building  one 
from  scratch,  our  Inca  solutions  will  work  for  your  business.  So  come  together  with 
the  one  company  with  the  experience  and  expertise  to  deliver  next-generation 
Internet  telephony  today.  Nortel  Networks.  www.nortelnetworks.com/16JA  How  the  world  shares  ideas. 
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□  02.  □  VPN  Services 

□  03.  □  Firewalls/Security/Encryption  □ 

□  04.  □  Electronic  Commerce  □ 

□  05.  □  Web  Servers/Software  □ 

□  06.  □  Web  Enabled  Call  Center  Tools  □ 

LOCAL-AREA  NETWORKS/INTERNETWORKING 
A  B  A 


B 

07.  □  Voice/Video  Over  IP 
(IP  Multicast  Routing) 
08.  □  Internet  Services 
09.  □  Web  Hosting 

10.  □  Host  Access 

11.  □  Web  Development  Tools 


B 


B.  Plan  to  purchase 


A  B 

□  12.  □  Managemenl/Monitoring  Software 

□  13.  □  Web  Based  Management  Tools 

□  14.  □  Web  Based  Collaboration/ 

Groupware 

□  15.  □  CachingLoad  Balancing  Products 

□  16.  □  Other  Intemet/lntranet 


A  B 


□  17.  □  Local-Area  Networks 

□  18.  □  Network  Operating  System 

Software  (NOS) 

□  19.  □  Intel  Based  Servers 

□  20.  □  Intel  Based  Multiprocessor  Servers 

□  21.  □  RISC  Based  Servers 

□  22.  □  Clustered  Servers 

□  23.  □  Print  Servers 

□  24.  □  Routers 

WAN  EQUIPMENT  &  SERVICES  _ 

A  B 

□  40.  □  Modems 

□  41.  □  Cable  Modems 

□  42.  □  Asynchronous  Transfer  Mode  (ATM) 

□  43.  □  Frame  Relay  Equipment 

Including  FRADS 

□  44.  □  Frame  Relay  Services 

□  45.  □  Remote  Access  Products 


□  25.  □  Layer  2  Switches 

□  26.  0  Layer  3  Switches 

□  27.  □  Layer  4  Switches 

□  28.  □  ATM  Switches 

□  29.  □  Token-Ring  Switches 

□  30.  □  Network  Storage  (NAS,  SANs) 

□  31.  □  Storage/Backup  (Optical,  Disk, 

Tape,  RAID) 

□  32.  □  Network  Test/Diagnostic  Tools 


A  B 

□  46.  □  Remote  Access  Services 

□  47.  □  Wireless  Data  Equipment/Services 

□  48.  □  ISDN  EquipmenMlervices 

□  49.  □  FT- l/T-l/T-3  Services 

□  50.  □  xDSL  Services/Products 

□  51.  □  Diagnostic/Test  Equipment 

□  52.  □  DSU/CSU 


□  33.  □  UPS 

□  34.  □  Network  Interface  Cards 

(NICs, PCMCIA) 

□  35.  □  Hubs/Intelligent  Hubs/ 

Stackable  Hubs 

□  36.  □  Cables, Connectors,  Baiuns 

□  37.  □  SNMP  Platform 

□  38.  □  Management  Frameworks 

□  39.  □  Other  LAN/Intemetworking 


A  B 

□  53.  □  PBXs 

□  54.  □  Videoconferencing 

□  55.  □  Managed  LAN/Router  Services 

□  56.  □  Fax  Servers/Services 

□  57.  □  Other  WAN  Equipment/Services 

A  B 

None  of  the  above  (1-57)  □  58.  □ 


Street  Address  City  State  Zip 

Publisher  reserves  the  right  to  serve  only  those  individuals  who  meet  publication  qualifications.  ALL  questions  must  be  answered. 
Incomplete  forms  will  not  be  processed.  Free  subscriptions  available  to  qualified  US  applicants.  International  rates  available  upon  request. 


Jf— — ^  DO  7  7 

I  [  J  What  is  the  principal  business  activity  at  your  location? 

(check  ONE  only) 

01.  □  Manufacturing  (other) 

02.  □  Finance/Banking 

03.  □  Insurance/Real  Estate/legal 

04.  □  Health  Care  Services 

05.  □  Hospitality/Entertainment/Recreation 

06.  □  Media/TV/Cable/RadicVPrint 

07.  □  Retail/Wholesale  Trade/Business  Services 
08.  □  Transportation 

09.  □  Utilities/Process  Industries 
(Mining/Construction/Petroleum 
Refining/Agriculture/Forestry) 

10.  □  Education 

11.  □  Government 

12.  □  Military 

13.  □  Aerospace 

14.  □  Consulting  (Independent)  * 

15.  □  Carriers/Service  Providers 

16.  □  Internet  Service  Provider  (ISP) 

17.  □  Manufacturing  (Computer/ 

Communications/OEM) 

18.  □  Resellers  of  Computer/Network 

Products  (VARs,VADs)* 

19.  □  SystemstNetwork  Integrators* 

20.  □  Distributors  (Computer/ 

Communications)* 

21.  □  Other  (please  specify) 

•Attn  Consultants,  Integrators, 

Distributors,  Resellers:  Please  complete 
entire  form  based  on  ALL  clients  and 
your  own  business  needs 

P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  is  your  secondary  job  function?  icheckju  that  apply) 


p  s 

□  1.  □  Network  Management 

□  2.  □  IAN  Management 

□  3.  □  Datacom/Telecom  Management 

□  4.  □  IS/rr/MIS/CIO/CTO/Systems 

Management 


P  S 

□  5.  □  Intemet/Intranet/E-Commerce 

Mgmt,  Webmaster 

□  6.  □  Engineering  Management 


P  S 

□  7.  □  Corporate  Management  (CEO, 

COO,  CFO,  Pres.,  VP,  Dir.,  Mgr.) 

□  8.  □  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 


What  is  the  estimated  value  of  Network  equipment  and  services  that  you  specify, 

recommend  or  approve  the  purchase  Of?  'Please  print  the  appropriate  number  code  on  the  line  next  to  each 
product  category.  Please  complete  ALL  categories  A-N.) 


1.  $100  Million  or  more 

2.  $50  Million  to  $99.9  Million 

3.  $25  Million  to  $49.9  Million 

4.  $10  Million  to  $24.9  Million 

5.  $1  Million  to  $9.9  Million 

6.  $100,000  to  $999,999 

7.  $50,000  to  $99,999 

8.  Under  $50,000 

9.  None  of  the  above 


A  ___  Large  Systems 

(Mainframes/Minis) 

B  _ Desktops  (Micros/Laptops/ 

Workstations/PDAs) 

C  _ Servers 

D  LANs 

E  _ WAN  Equipment 

F  _ Carrier  Services 


G 

H 

I 

J 

K 

L 

M 

N 


.  Internetworking 
. Internet 

_  Intranet  E-Commerce 
.  Extranet/Ecommerce 
.  Remote  Access 
_  Peripherals  (including  storage) 
.Software 
_  Service/Support 


a  What  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

(check  ONE  only) 


1.  D100+  2.  D50-99  3.  □  20-49  4.  □  10-19  5.  □  2-9  6.  □  1 


7.  □  None 


What  is  the  total  number  of  Servers/Clients/LANs  installed/planned  at  your  location/ 
in  your  entire  organization?  check  one  box  in  each  column) 


SERVERS 

At  Location 
A 

□  1.  50,000+ 


Entire  Org. 
B 

□ 


□  2,  10,000  to  49,999  □ 


□ 

□ 

□ 

□ 


3.  1,000  to  9,999 

4.  100  to  999 

5.  50  to  99 

6.  10  to  49 


□  7.  1  to  9 

□  8.  none 


□ 

□ 

□ 

□ 

□ 

□ 


At  Location 
C 

□  I- 

□  2. 

□  3. 

□  4. 

□  5. 

□  6. 

□  7. 

□  8. 


CLIENTS 

Entire  Org. 

D 

50,000+  □ 

10,000  to  49,999  □ 


1,000  to  9,999 
100  to  999 
50  to  99 
10  to  49 
1  to  9 
none 


□ 

□ 

□ 

□ 

□ 

□ 


At  Location 
E 

□  1.  50,000+ 

□  2. 


LANS 

Entire  Org. 
F 

□ 

10,000  to  49,999  □ 

□  3.  1,000  to  9,999  □ 

□  4.  100  to  999 

□  5.  50  to  99 

□  6.  10  to  49 

□  7.  1  to  9 

□  8.  none  0 


6. 

What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products  and 
services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE: 

1.  □  Entire  Enterprise/Multiple  Enterprises 

2.  □  Division/Multiple  Divisions 

3. D  Department 

4. D  None 

B.  Involvement  (check  ALL  that  apply) 

!.□  Create  Network/IT  Strategy  4.D  Evaluate  Products/Services 

2.  □  Recommend/Specify  Brand  5.  □  Determine  the  Need 

3.  □  Approve  Purchase  6.  □  None 

m 

What  is  the  estimated  number  of  employees  at  your  location/in  entire  organization? 

(check  ONE  in  eacti  section) 

A.  At  your  location: 

1.  □  Over  20,000  6.  □  500-999 

2.  □  10,000-  19,999  7.  □  250-499 

3.  □  5,000  -  9.999  8.  □  100-249 

4.  □  2,500  -  4,999  9.  □  99  or  less 

5.  □  1,000  -  2,499 

B.  Entire  organiiation: 

1.  □  Over  20,000  5.  □  1,000  -  2,499 

2.  □  10,000-  19,999  6.  □  500-999 

3.  □  5,000  -  9,999  7.  □  499  or  less 

4.  □  2,500-4,999 

9. 

Please  indicate  the  Network  hardware/software/services  that  you  are  currently  involved  in 
purchasing  or  plan  to  purchase:  (check  all  that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 

LUZ 

1  COMPUTERS/PERIPHERALS 

A 

B 

A  B 

A  B 

□  01.  □  Laptops/Notebooks/PDAs 

□  05.  □  Storage/Backup 

□  08.  □  Minis 

□  02.  □  PCs 

(Optical,  Diskjape,  RAID) 

□  09.  □  Mainframes 

□  03.  □  Windows  Terminals/Thin  Clients 

□  06.  □  Printers 

□  10.  □  Fax/Modem  Boards 

□  04.  □  Workstations 

□  07.  □  Printer/Fax/Copier  Hybrids 

□  11.  □  Memory/Chips/Boards/Cards 

SOFTWARE/APPLICATIONS 

(Multifunction  Printers) 

□  12.  □  Other  Computers/Peripherals 

A 

B 

A  B 

A  B 

□  13.  □  Network  Management 

□  21.  □  E-Mail 

□  28.  □  Site  Metering  Tools 

□  14.  □  Systems  Management 

□  22.  □  Enterprise  Resource  Planning 

□  29.  □  DataWarehousing 

□  15.  □  Security 

(ERP) 

□  30.  □  Anti  Virus  Software 

□  16.  □  Directory  Services 

□  23.  □  EDI 

□  31.  0  Multimedia 

□  17.  □  Operating  Systems 

□  24.  □  Desktop  Videoconferencing 

□  32.  □  Y2K  Conversion  Software 

□  18.  □  Applications  Development  Tools 

□  25.  □  Imaging 

□  33.  □  Helpdesk 

□  19.  □  Database  Management/RDBMS 

□  20.  □  Groupware 

SERVICES 

□  26.  □  Middleware/Servenvare 

□  27.  □  Document  Management 

□  34.  □  Other  Software/Applications 

A 

B 

A  B 

A  B 

□  35.  □  BPO  (Business  Process 

Outsourcing  incl.  Financial 
Sendees,  HR,  Logistics  etc.) 

□  36.  □  Applications  Outsourcing 

□  37.  □  Call  Center  Outsourcing 

□  38.  □  Systems  Integration/Consulting 

□  39.  □  Education/Training  Services 

□  40.  □  Other  Services 

A  B 

None  of  the  above  (1  -  40)  □  41.  □ 

I  r)  Please  indicate  the  platforms  that  are  currently  installed/planned:  (check  all  that  apply) 

A.  Currently  installed  B.  Planned  for  purchase 

NETWORK  PROTOCOLS 

A  B 

□  01.  □  TCP/IP 
;  □  02.  □  IPv6 

1  D03.  DSNA 

LAN/WAN  ENVIRONMENT 

A  B 

□  04.  □  Novell  IPX/SPX 

□  05.  □  APPC/APPN/LU  6.2 

□  06.  □  NETBlOS/NETBUEl 

A  B 

□  07.  □  NFS 

□  08.  □  SNMP 

□  09.  □  Other  Network  Protocols 

A  B 

□  10.  □  Gigabit  Ethernet 

□  11.  □  Switched  Ethernet 

□  12.  □  Fast  Ethernet 

□  13.  □  Ethernet 

□  14.  □  ATM 

□  15.  □  Token  Rin^Token  Ring  Switching 
NETWORK  OPERATING  SYSTEM 

A  8 

□  16.  □  IP  Switching 

□  17.  □  Layer  3,4  Switching 

□  18.  □  FDDI 

□  19.  □  100Base-T 

□  20.  □  lOBase-T 

□  21.  □  Fibre  Channel 

A  B 

□  22.  □  Wireless 

□  23.  □  DSL 

□  24.  □  ISDN 

□  25.  □  Frame  Relay 

□  26.  □  Private  Line  Tl,  T3,  FT-1,  SONET 

□  27.  □  Other  LAN/WAN  Environment 

A  B 

□  28.  □  Windows  NT/Windows  2000 

□  29.  □  Novell  (NetWare  5.X) 

□  30.  □  Novell  (NetWare  4X) 

□  31.  □  Novell  (NetWare  2.1C3.X) 

COMPUTER  OPERATING  SYSTEM 

A  B 

□  32.  □  LINUX 

□  33.  □  Microsoft  (LAN  Manager) 

□  34.  □  Banyan  (Vines) 

A  B 

□  35.  □  IBM  (UN  Server) 

□  36.  □  Other  Network  Operating  System 

A  B 

□  37.  □  NT  Workstation 

□  38.  □  Windows  2000 

□  39.  □  Windows  98A50.1 

□  40.  □  Intel  based  UNIX 

□  41.  □  RISC  based  UNIX  (incl.  SOLARIS) 

A  B 

□  42.  □  LINUX 

□  43.  □  DOS 

□  44.  □  OS/2, OS/2  WARP 

□  45.  □  OS/400 

□  46.  □  IBM  MVS/VM/VSE/ESA 

A  B 

□  47.  □  Digital  VMS 

□  48.  □  Macintosh 

□  49.  □  Other  Computer  Operating  System 

A  B 

None  of  the  above  (1-  49)  □  50.  □ 

Which  of  the  following  hardware  platforms  are  installed/planned  in  your  company? 

L  L-e,'|  icheckALLthatapply) 

A  -  Mainframes 

B  -  Minis  (Midrange) 

C  -  Workstations 

(Large  Scale) 

1.  □  IBM  RS/6000 

1.  □  Sun  Microsystems 

1.  □  IBM 

2.  □  IBM  AS/400 

2.  □  H-P 

2.  □  Other 

3.  □  Digital/Tandem/Compaq 

3.  □  Digital/Compaq 

4.  □  Unisys 

4.  □  IBM 

5.  □  H-P 

5.  □  Silicon  Graphics 

6.  □  Other 

6.  □  Other 

12 


1. 

2. 

3. 

4. 


What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 


(check  ONE  only) 


□  $20  Billion  or  More 

□  $1 0  Billion  to  $19.9  Billion 

□  $!  Billion  to  $9.9  Billion 

□  $500  Million  to  $999.9  Million 


5.  □  $100  Million  to  $499.9  Million  9.  □  $4.9  Million  or  less 

6.  □  $50  Million  to  $99.9  Million  10.  □  None  of  the  above 

7.  □  $10  Million  to  $49.9  Million 

8.  □  $5  Million  to  $9.9  Million 


For  which  areas  outside  of  the  US  do  you  have  purchase  influence? 

(check  ALL  that  apply) 


1.  □  Europe 

2.  □  Asia 


3.  □  South  America 

4.  □  Australia 


5.  □  Middle  East 

6.  □  Africa 


7.  □  Canada 

8.  □  None 


FORM:  9902 


The  newsweekly  of  enterprise  network  computing 

Apply  for  your  FREE  subscription  to 
Network  World  today!  Simply  follow 
these  three  easy  steps: 

O  Answer  ALL  the  questions 
©  Sign  and  date  the  form 
©  Mail  today! 


Key  DSL  flavor  faces 


Start-ups  aim  to  change  hp  lays  out 
how  hardware  is  built  °PenView 


$129. 
VALUE! 

For  faster  service,  subscribe  online  at: 

http://www.nwwsubscribe.com/nbbi 
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EACH  QUALIFIED 
SUBSCRIPTION 
INCLUDES: 

^  51  FREE  issues  of 
Network  World 

►  6  Signature  Series 
special  issues  on 
key  industry  players 
and  trends 

►  Product  reviews, 
buyers  guides, 
management  surveys 
and  more! 


1.  FOLD  HERE  &  MAIL  TODAY  i 


Your  colleagues  may  also  qualify 
for  a  FREE  subscription! 

Please  list  below  names  and  job  functions  of  other  individuals  at  your  location  who  might  also  benefit 

from  a  FREE  subscription  to 
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Enterprise 


Briefs 


GTE  CyberTrust,  a  Needham 
Heights,  Mass.,  company  that 
markets  public-key  infrastruc¬ 
ture  products  and  services,  last 
week  changed  its  name  to  sim¬ 
ply  CyberTrust. 

Company  President  Peter 
Hussey  says  the  change  was 
made  to  reinforce  the  Cyber¬ 
Trust  name  as  an  independent 
entity. 

Hewlett-Packard  this  week 
will  announce  that  its  OpenMail 
messaging  product  now  sup¬ 
ports  the  Linux  operating  system. 

The  messaging  product 
already  supports  HP-UX,  Solaris 
and  AIX. 

HP:  www.hp.com 

IT  Factory  last  week  shipped 
ITF  4.99,  a  software  development 
kit  and  business  application 
suite  for  Lotus  Notes/Domino. 
The  new  software  includes  the 
Analyzer  tool  fortesting  Notes 
applications  for  Year  2000  com¬ 
pliance  and  a  set  of  7,000  busi¬ 
ness  objects  for  building  Web- 
based  applications.  ITF  4.99  also 
includes  tools  for  integrating 
legacy  databases  into  Notes 
applications. 

ITF  4.99  runs  on  Domino 
4.6.  Pricing  starts  at  $400  per 
developer. 

IT  Factory:  www.itfactory.com 

Queue  Systems  last  week 
introduced  Q-Message,  middle¬ 
ware  for  linking  applications  on 
the  same  hardware  platform  or 
across  a  network.  The  Columbia, 
S.C.,  company's  software,  which 
works  across  OpenVMS,  Unix, 
Windows  NT  and  Modcomp  Max 
IV  operating  systems,  ensures 
that  a  bidirectional  path  is  open 
between  applications  at  all 
times. 

The  software  costs  $5,000  per 
server  and  $500  per  client. 

Queue:  www.queuesys.com 


Sun-Netscape  pumps  up  apps  server 


A  new  Web  workhorse 

Netscape  Application  Server  4.0  highlights: 

•  Support  for  Enterprise  JavaBeans,  Java  Server  Pages 
and  Java  Servlet  API. 

•  Built-in  transaction  monitoring  system  from  IBM 

•  Custom  and  automatic  load-balancing  options. 

•  Support  for  SNMP-based  network  management  tools. 


BY  CAROLYN  DUFFY 
MARS AN 

The  Sun-Netscape  Alliance  last 
week  announced  that  it  has 
enhanced  its  high-end  elec¬ 
tronic  commerce  server  and  added  sup¬ 
port  for  the  latest  Java  standards  in  an 
attempt  to  solidify  the  server’s  hold  on 
transaction-heavy  customer  Web  sites. 

Netscape  Application  Server  4.0  sup¬ 
ports  the  recently  released  Java  2 
Enterprise  Edition,  a  package  of  program¬ 
ming  interfaces  and  network  services  for 
building  large-scale  applications.  The 
e-commerce  server  software  also  includes 
an  integrated  transaction  monitoring  sys¬ 


tem  and  improved  performance 
with  third-party  network  manage¬ 
ment  and  application  develop¬ 
ment  tools. 

The  enhancements  make 
Version  4.0  the  fastest  and  most 
scalable  offering  on  the  market, 

Alliance  officials  claim. 

“The  bar  is  much  higher  than  it 
was  before,”  says  Yuan  Hunting- 
ton,  group  product  marketing 
manager  for  the  Netscape  Application 
Server.  “With  the  scalability  that  we’re 
offering  now,  we  can  support  sites  with 
millions  of  users.” 

Netscape  Application  Server  is  on  a  roll, 
reporting  its  highest-ever  sales  in  the  quar¬ 


ter  ended  June  30.  Alliance  officials  say 
that  half  of  the  10  most  popular  financial 
Web  sites  use  earlier  versions  of  the  soft¬ 
ware,  as  do  a  majority  of  the  top  10  ISPs. 

“A  year  ago,  application  servers  were 

See  Sun-Netscape,  page  26 


Blue  Martini  customizes  e-comm 


BY  ELLEN  MESSMER 

SAN  MATEO,  CALIF.  —  Blue  Martini 
Software  has  introduced  a  new  edition 
of  its  electronic  catalog  software  that 
gives  online  retailers  much  more  flexi¬ 
bility  in  the  way  they  present  their  mer¬ 
chandise  to  prospective  customers. 

E-Merchandizing  System  2.0,  a  pack¬ 
age  that  costs  upwards  of  a  half-million 
dollars,  now  includes  a  new  content 
management  module  and  the  ability  to 
analyze  the  “click  patterns”  of  users  as 
they  browse  a  company’s  Web  site. 

The  content  management  component 
lets  a  marketing  team  organize  text, 


Streamlining  Web  page  production 


images,  videos  or  templates  for  merchan¬ 
dise  so  that  the  goods  can  be  sold  online 
in  a  variety  of  ways,  depending  on  the 
time  of  year  or  the  online  shopper’s  loca¬ 
tion.  A  version  management  feature  lets 
multiple  authors  modify  material  or  check 
it  out  of  the  E-Merchandizing  Server,  the 
part  of  the  E-Merchandizing  System  used 
to  create  catalog  content  in  a  workflow 
environment  (see  graphic). 

When  complete,  the  catalog  Web  files 
are  sent  in  batch  mode  to  a  staging  envi¬ 
ronment  to  be  checked.  Then,  final  con¬ 
tent  is  sent  to  the  Blue  Martini  WebStore 
application  server. 

The  merchandising  software,  which 


runs  on  Windows  NT  and  Solaris,  now  also 
includes  options  for  the  cross-selling  of 
multiple  products,  product  substitution,  a 
gift  registry  and  employee  shopping. 

“In  Version  2.0,  we  also  have  rules- 
based  promotions,  which  means  you  can 
have  personalized  discounts  based  on 
who  is  shopping,  what’s  in  the  basket  and 
what  time  of  year  it  is,”  says  Bill  Evans,  Blue 
Martini’s  vice  president  of  marketing. 

Even  when  the  shoppers  are  anony¬ 
mous,  information  on  Web  sites  can  still 
be  personalized  for  them.  This  is  done  by 
analyzing  shoppers’  click  streams  and 
through  data-mining  technology  included 
in  the  E-Merchandizing  System,  which 
now  comes  with  Seagate’s  Crystal  Info 
reporting  tool. 

Gymboree,  a  Burlingame,  Calif.,  retailer 
of  children's  apparel,  plans  to  switch  from 
its  home-grown  Web  catalog 
to  one  based  on  Blue  Mar¬ 
tini  software  by  October  in 
order  to  be  ready  for  the 
holiday  shopping  season. 

“We  were  early  adopters 
of  e-commerce  back  in  ’97, 
but  we  were  doing  it  in  a 
somewhat  primitive  way, 
with  limited  selection  and 
a  rudimentary  fulfillment 
process,”  says  Gymboree 
spokeswoman  Jordan 
Goldstein.  “But  now  we’ve 
opened  a  distribution  cen¬ 
ter  for  online,  and  we  want 
to  be  proactive  about  per¬ 
sonalization,  taking  advan¬ 
tage  of  what  we  know 
about  shoppers.” 

Blue  Martini:  www.blue 
martini.com 


Blue  Martini's  modular  WebStore  architecture  makes  it  easier  for  online  retailers  to  cull  inventory 
and  catalog  data  to  post  on  e-commerce  sites. 

OQ  Data  is  sent  to  a  staging  environment,  where  tech- 
Data  that  will  appear  online  is  collected  via  a  ^  nicians  can  view  the  data’ and  adjust  how  the  Web 

data  mining  server  and  compiled  on  Blue  Martini  s  pages  will  look  and  function  once  posted. 

E-Merchandizing  Server. 
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o  Once  finalized,  the  Web  pages  are  posted.  The 
pages  reside  on  a  WebStore  application  server, 
which  interacts  with  WebStore  Web  servers  to 
process  e-commerce  transactions. 
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irend  Micro  keeping  a  sharp  eye  on  message  content 


Cleaning  up  the  mail 


Trend  Micro’s  ScanMail  for  Exchange  3.0  includes  a  feature 
called  eManager  that  lets  companies  set  rules  that  block 
offensive  content  and  spam. 


^ScanMail  eManager  Configuration 


Select  Server  Anti-spam  j  Content  Filter  j 


The  antispam  filter  lets  e-mail  admin- 


BY  JOHN  FONTANA 

CUPERTINO,  CALIF.  — 
Trend  Micro  is  beginning  to 
look  at  the  content  of  e-mail, 
not  just  viruses,  as  it  seeks  to 
boost  the  capabilities  of  its 
ScanMail  products. 

The  company  in  two  weeks 
plans  to  ship  Version  3-0  of 
ScanMail  for  Exchange,  which 
includes  content  filtering  tech¬ 
nology"  and  failover  support  for 
Microsoft  Exchange  servers 
linked  in  a  cluster.  Trend  in¬ 
tends  to  make  the  features  avail¬ 
able  for  all  its  messaging  server- 
based  ScanMail  products, 
including  those  for  Lotus  Notes 
and  cc:Mail,  Microsoft  Outlook 
and  Hewlett-Packard  OpenMail. 

Trend  has  borrowed  tech¬ 
nology"  from  its  InterScan 
VirusWall  product  to  create  a 
plug-in  for  ScanMail  called 
eManager.  The  product  allows 
e-mail  to  be  filtered  based  on 
the  content  of  a  message  and 
whether  or  not  it  is  considered 
spam.  The  content  filter  can 
look  for  offensive  or  inappro¬ 
priate  language  or  certain  code 
words  or  names  that  should 
not  be  passed  in  e-mail.  The 
spam  filter  is  linked  to  a  data¬ 


base  of  known  spam  addresses 
and  Web  sites  that  Trend  main¬ 
tains,  which  can  be  down¬ 
loaded  onto  Exchange  servers. 

Both  eManager  filters  block 
e-mail  before  it  has  a  chance  to 
clog  servers  or  pass  inappropri¬ 
ate  content,  Trend  officials  say. 

The  company  also  has  taken 


advantage  of  the  Microsoft 
Cluster  Service  API  in  order  to 
support  clusters  of  Exchange 
servers.  Deploying  Exchange 
servers  in  clusters  has  become 
popular  to  ensure  scalability 
and  reliability.  ScanMail  moni¬ 
tors  each  server  in  the  cluster 
to  ensure  all  mail  is  checked 


for  viruses  and  content. 

ScanMail  for  Exchange 
3.0  also  addresses  macro 
viruses  and  message- 
attached  executables  with 
a  new  Emergency  File 
Blocking  service.  Admini¬ 
strators  can  use  the  service 
to  block  all  attachments  or 
specifically  filter  such  con¬ 
tent  as  .exe  attachments  or 
.doc  attachments  that 
include  macros. 

“As  content  viruses 
become  more  common, 
we’ll  see  all  the  vendors 
going  to  content  filtering,” 
says  Kurt  Schlegel,  an  ana¬ 
lyst  with  Meta  Group.  “The 
next  big  focus  will  be 
speed  —  how  quickly  the 
vendors  can  get  the  fix  out 
to  combat  fast  spreading 
viruses  or  worms.” 

The  speed  at  which  a 
virus  can  spread  was  re¬ 
cently  highlighted  by  the  Melissa 
and  Worm  viruses  that  rocked 
corporate  e-mail  systems. 

Trend  is  addressing  the  issue 
with  ActiveUpdate,  which 
allows  remote  and  local  servers 
to  be  updated  automatically 
with  the  latest  virus  informa¬ 
tion  on  set  schedules.Trend  also 


has  added  a  ScanMail  Server 
Status  feature  that  reports  the 
health  of  ScanMail  and  the  ver¬ 
sion  of  the  virus  database  run¬ 
ning  on  each  server. 

“The  problem  is  content,  not 
just  viruses,”  says  Dan  Schrader, 
vice  president  of  new  technol¬ 
ogy  for  Trend.  “The  goal  is  to 
protect  all  the  content  threats.” 

ScanMail  for  Exchange  3-0  is 
priced  at  $5,000  without  the 
eManager  plug-in  and  $6,250 
with  the  addition.  Both  prices 
are  for  250  users. 

Separately,  Network  Asso¬ 
ciates  last  week  unveiled  an¬ 
other  virus  detection  program 
for  Exchange. 

GroupShield  for  Exchange 
Version  4.0.3  features  Viru- 
Logic,  which  detects  false  posi¬ 
tive  results  when  scanning  for 
viruses.  This  increases  the  accu¬ 
racy  of  virus  detection.  The  soft¬ 
ware  also  has  a  “virus  lock”  to 
prevent  reinfection  from  viruses 
lying  dormant  in  private  folders. 

The  Network  Associates 
product  is  priced  at  $19  per 
seat,  per  year  for  5,000  nodes 
or  more. 

Trend:  www.antivirus.com; 
Network  Associates:  www.nai. 
com 


Sun-Netscape, 

continued  from  page  25 

really  for  early  adopters,  people 
experimenting  with  e-com- 
merce.  But  now  they’ve  become 
mainstream  products,”  Hunting- 
ton  says.  “Companies  are  look¬ 
ing  at  application  servers  as  the 
foundation  to  build  their  online 
businesses.” 

Available  for  four  years, 
Netscape  Application  Server  is  a 
relative  old-timer  in  the  Web 
application  server  marketplace. 
Analysts  report  that  the  pack¬ 
age  has  more  large-scale  deploy¬ 
ments  —  including  online  stock 
trading  site  E-Trade  Securities 
and  health  care  information 
provider  drkoop.com  —  than 
do  competing  products  from 
IBM  and  BEA  Systems. 

Support  for  the  Java  2  plat¬ 
form  is  important  for  applica¬ 
tion  portability,  and  other  Web 
application  server  vendors  have 
announced  plans  to  adopt  it. 

By  moving  away  from  a  pro¬ 
prietary  programming  interface 
to  industry  standards,  the  Sun- 
Netscape  Alliance  is  offering  its 


customers  investment  protec¬ 
tion,  industry  observers  say. 

But  what  customers  will  like 
even  more  is  the  fact  that  per¬ 
formance  won’t  suffer  with 
support  for  the  new  Java  stan¬ 
dards.  In  fact,  alliance  officials 
say  that  by  coding  to  the  Java  2 
standards  instead  of  the  older 
proprietary  interface,  cus¬ 
tomers  can  improve  the  per¬ 
formance  of  their  applications 
by  20%  or  more. 

“There’s  always  a  risk  that 
when  you  try  to  achieve  a  level 
of  portability  across  a  wide  set 
of  platforms,  you  will  sacrifice 
something  in  performance, 
look  and  feel  or  behavior,”  says 
Tom  Dwyer,  research  director 
for  Enterprise  Java  at  Aberdeen 
Group  in  Boston.  “[The  Sun- 
Netscape  Alliance]  didn’t  sacri¬ 
fice  performance.” 

Dwyer  says  the  Netscape 
offering  has  traditionally  been 
the  leader  at  providing  high  per¬ 
formance  and  high  availability 
in  environments  with  unpre¬ 
dictable  amounts  of  Web  traffic. 
He  says  these  areas  of  strength 
continue  with  the  latest  version. 


Another  performance  en¬ 
hancement  is  a  built-in  transac¬ 
tion  monitor  from  IBM,  which 
is  also  found  in  IBM’s  compet¬ 
ing  WebSphere  product. 

“Companies  that  are  doing  a 
large  amount  of  e-commerce 
transactions,  where  they  are 
exchanging  money  or  data,  will 
appreciate  . . .  the  data  integrity 
that  this  offering  provides,” 
Huntington  explains. 

Coupled  with  improve¬ 
ments  in  load  balancing  and 
failover  functionality,  the  trans¬ 
action  processing  enhance¬ 
ments  are  “a  good  thing,”  says 
Nicholas  Gall,  a  vice  president 
at  consulting  firm  Meta  Group 
in  Westborough,  Mass.  “These 
advancements  in  availability 
are  important,  as  a  lot  more 
attention  is  given  to  situations 
like  the  eBay  fiasco,  where 
people  were  off-line  for  hours.” 

Pegasus  Systems,  the  largest 
processor  of  hotel  reservations 
on  the  Internet,  selected  the 
Netscape  offering  from  a  field 
of  12  Web  application  servers 
because  of  its  ability  to  handle 
large  numbers  of  transactions 


More 

Onli  e 

Netscape  Application 
Server  and  Java  2  Enter¬ 
prise  Edition  overviews. 

A  look  at  a  free  Java-based 
application  server. 

Docfimtcr 

FIND  IT  EHEn  ON  FUSION 


and  reroute  traffic  if  a  server 
goes  down.  The  Dallas-based 
operator  of  travelweb.com  is 
running  the  software  on  two 
production  servers  and  is  han¬ 
dling  three  times  the  amount  of 
traffic  this  year  over  last  year. 

“What  really  has  impressed 
us  is  the  scalability  and  the  reli¬ 
ability  of  the  architecture,”  says 
Steve  Reynolds,  chief  informa¬ 
tion  officer  at  Pegasus.  As  far  as 
Version  4.0  is  concerned, 


Reynolds  says  he  is  most  inter¬ 
ested  in  the  reported  speed 
increases.  “We’re  interested  in 
anything  that  will  enhance  our 
performance.” 

In  a  related  announcement, 
Netscape  Application  Builder 
4.0  has  been  enhanced  with 
JavaBeans  support,  a  variety  of 
wizards  and  interoperability 
with  third-party  application 
development  tools  such  as 
Symantec  Visual  Cafe  and 
Macromedia  Dreamweaver. 

Expected  to  ship  this 
month,  Netscape  Application 
Server  4.0  is  priced  at  $35,000 
per  CPU,  the  same  price  as  ear¬ 
lier  versions. 

The  Sun-Netscape  Alliance 
was  formed  in  March  when  Sun 
and  America  Online  (which  had 
acquired  Netscape)  joined 
forces  to  offer  a  complete  line  of 
Web  and  e-commerce  products 
and  services  for  enterprise  cus¬ 
tomers.  The  next  version  of  the 
Netscape  Application  Server, 
expected  in  the  first  half  of 
2000,  will  marry  Netscape’s  soft¬ 
ware  with  Sun’s  NetDynamics 
Application  Server.  3 
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'Net  Insider 
Scott  Bradner 

The  absence 

OF  NETWORK 
SECURITY 

“There  is  no  such  thing  as  a  secure 
computer  network.” 

The  New  York  Times  said  that  a 
week  ago  and  if  The  Times  said 
something,  it  must  be  true.  But  do  pro¬ 
tocol  and  applications  developers 
understand  the  implica¬ 
tions  of  this? 

Almost  by  definition, 
computer  networks  can¬ 
not  be,  in  themselves, 
secure.  The  aim  of  com¬ 
puter  networks  is  to  facil¬ 
itate  access  to  computer- 
based  resources.  In  order 
to  do  so,  they  transport  information  from 
one  place  to  another,  generally  with  a 
user  or  two  somewhere  along  the  line. 

Users  are  a  problem  in  the  security" 
world.  They  forget  things  like  pass¬ 
words.  They  get  frustrated  at  the  impo¬ 
sition  of  complex  security  procedures 
and  circumvent  these  procedures  to 
make  their  lives  easier.  They  loan  their 
accounts  to  friends.  And  many  users 
think  they  are  underpaid,  overworked 
or  underappreciated  —  as  a  result, 
these  users  are  potentially  corruptible. 

It  sure  would  be  a  lot  easier,  security- 
wise,  without  users. 

Anything  you  do  to  make  users’  lives 
easier  has  security  implications.  For 
example,  if  you  allow  a  remote  user  to 
access  corporate  servers,  you  have  to 
open  a  door  that  other  remote  people 
may  be  able  to  exploit.  If  you  run  an 
e-mail  system  that  can  transfer  programs 
or  macro-filled  documents,  you  are 
opening  a  barn  door. 

But  it  turns  out  that  a  major  problem 
is  the  attitude  of  protocol  and  applica¬ 
tions  designers. 

In  the  IETF,  we  now  insist  that  all 
working  groups  keep  security  in  mind 
as  they  design  protocols.  But  even  in  the 
IETF,  security  is  often  reluctantly  added 
at  the  end  rather  than  designed  in  from 
the  beginning.  I  say  reluctantly  because 
when  I  ask  why  a  working  group  has 
not  yet  considered  security,  I  keep  get¬ 
ting  the  response  “my  customers  are  not 
asking  for  security.”  It  has  sometimes 
been  quite  a  fight  to  get  working  groups 
to  seriously  worry  about  the  issue. 

If  it’s  this  hard  to  get  secure  proto¬ 
cols  within  an  organization  that  has 
made  security  a  specific  goal,  it  seems 
to  be  almost  impossible  in  commercial 
applications  development  organiza¬ 
tions.  Features  are  added  to  programs 
seemingly  without  any  thought  of  the 
security  implications. 


This  is  not  going  to  be  easy  to  fi*. 
Security  is  hard.  Some  of  the  people 
who  would  exploit  security  holes  are 
very  smart  (if  more  than  a  bit  immoral). 
They  will  find  any  small  chink  in  the 
armor  —  and  unless  the  developer  is  a 
real  security  expert,  it  is  hard  to  see  a 
chink  when  programming  one  in.  'Hie 


problem  is  made  harder  because  of  the 
easy-to-run  exploitation  scripts  that  get 
widely  distributed. 

Companies  must  get  security  exper¬ 
tise  into  their  software  development 
groups  and  users  must  use  the  resulting 
security  tools.  Otherwise,  the  Internet 
bubble  may  burst  in  a  very  ugly  way. 


Disclaimer:  Harvard  has  seen  many 
bubbles  come  and  go,  but  the  above 
worry  about  this  bubble  is  mine. 

Bradner  is  a  consultant  with  Har¬ 
vard  University’s  University  Informa¬ 
tion  Systems.  He  can  be  reached  at 
sob@harvard.  edu. 
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IT  Decisions 


involve 
very  high 
stakes... 


IT  DecisionGufu 
recently  received 
Network  World's 
distinguished 

World  Class  Award 


Can  your  business  afford 
to  gamble  on  the  outcome  ? 

Decisions  made  by  IT  organizations  are  vitally  important  for  today's  businesses.  IT  DccisionGuru  is 
your  strategic  edge,  providing  you  with  the  information  you  need  to  best  evaluate  your  IT  options: 

«  How  will  applications  perform  when  deployed? 

•  What  is  the  benefit  of  introducing  new  network  technologies? 

•  How  will  your  infrastructure  support  business  growth? 

•  How  can  you  best  reorganize  the  infrastructure? 

»  Can  you  deliver  guaranteed  IT  services  in  accordance  with  SLAs? 

•  How  robust  is  your  infrastructure  when  a  component  fails? 

•  What  is  the  cause  of  poor  application  response  time? 

Minimize  risk,  and  reap  the  rewards  of  making  the  best  IT  decisions. 
To  learn  more  about  solving  real  world  IT  problems  with 
IT  DecisionGuru,  visit  Mil.  3  at  wwwanil3.com, 
email  us  at  info@mil3.com  or  call  (202)304-4700. 


IT  DecisionGuru  showing  application  response  time  com¬ 
parisons  for  different  ATM  service  contracts. 


www.mil3.com 


HI’Ori  nVihv 


Third  Millennium  Technologies 


Guru 


MIL  3,  Inc.  3400  International  Drive.  NW  Washington  DC  20008  Simulation  Empowering  IT  Decision  Making' 


1999  MIL  3,  Inc.  IT  DecisionGuru  is  a  registered  trademark  of  MIL  3,  Inc. 


See  us  at  Networld+lnterop,  Booth  2628 
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It  better  be,  so  nearly  all  Compaq  enterprise-level  servers 
deliver  99.99%  availability,  up  to  99.999%  in  some  cases. 
That  applies  to  our  storage  systems,  too.  In  fact,  it’s  one  reason 

Compaq  is  the  enterprise  storage 
leader,  outselling  #2  IBM  by  $1.5 
billion!  Truth  is,  24/7  access  to 
data  is  now  a  critical  need,  not  just 
to  your  people,  but  to  your  public. 


Your  server  is 
your  warehouse. 

Is  it  working 
around  the  clock? 


For  example,  barnesandnoble.com 
is  now  riding  a  380%  annual  growth  curve  partly  because,  since 
their  system  was  installed  (10/98),  there’s  been  no  significant 
downtime.  It’s  a  Compaq  NonStop  e-Business  Solution,  and 
it  was  implemented  in  record  time  by  nonstop  Compaq 
people.  To  learn  more,  visit  www.compaq.com/warehouse, 
contact  your  reseller  or  call  T 800 -AT- COMPAQ. 

Compaq  StorageWorks 

Our  storage  solutions  rungs  front  server-mounted  systems  to  modular,  networked  RAID  urruys  available  24/  -  across  multi-vendor  1 1  infrastuntin  es. 

We  also  offer  an  open,  standards-based  storage  architecture  that  enhances  performance  and  simplifies  management  of  shared  resources ,  dramatically 
lowering  cost  of  ownership.  left  to  right:  Compaq  AlphaServer,  Compaq  ProLiant,  Compaq  NonStop  Himalaya 
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Enterprise  Applications  Special  Focus 

Microsoft  makes  important 

shift  with  Zoomit 


BY  JOHN  FONTANA 

icrosoft  has  been  working  for  the  past 
three  years  to  integrate  a  directory  into  its 
operating  system.  But  only  in  the  past  few 
months  has  the  company  begun  nailing 
down  answers  to  imposing  interoperability 
questions. 

More  than  six  months  ago,  the  top  brass  at  Micro¬ 
soft  bought  into  the  idea  of  adding  sophisticated  inter¬ 
operability  —  known  as  metadirectory  technology  — 
into  Active  Directory.  The  belief  is  that  the  technology 
will  make  it  easier  for  IT  executives  and  system  archi¬ 
tects  to  meld  Active  Directory  into  their  directory 
infrastructures. 

It  was  not  only  the  right  move  but  also  a  welcomed 
one,  according  to  IT  executives  and  industry  observers. 

The  new  Microsoft  focus  is  a  far  cry  from  the  origi¬ 
nal  vision  of  a  network  operating  system  (NOS)  direc¬ 
tory  that  would  absorb  existing  directories  into  Win¬ 
dows  2000,  which  is  scheduled  to  ship  by  year-end. 

What  Microsoft  now  envisions  is  a  flexible  Active 
Directory  that  can  be  deployed  as  an  enterprisewide 
directory  for  managing  user  and  resource  identities, 
or  as  a  peer  or  subordinate  directory  to  existing  infra¬ 
structures. 

The  new  direction  is  encapsulated  in  Microsoft’s 
recent  purchase  of  Zoomit,  which  develops  a  meta- 
director)7  product  called  Via.  A  metadirectory  is  a 
mechanism  to  interconnect  disparate  directories  to 
provide  a  single  logical  point  of  access. 

“The  metadirectory  is  an  engine  that  keeps  things 
synchronized  forever,”  says  Kim  Cameron,  former 
president  of  Zoomit,  now  with  Microsoft.  In  its  sim¬ 
plest  iteration,  a  metadirectory  can  consolidate  data 
into  a  central  repository.  At  its  most  complex,  a 
metadirectory  can  replicate  individual  chunks  of 
data  between  master  directories. 

Obtaining  the  Via  metadirectory  signals  a  realization 
by  Microsoft  that  it  must  respect  the  heterogeneous 
nature  of  most  corporate  directory  deployments. 
Current  interoperability  mechanisms,  including  Active 
Directory  Services  Interfaces  and  synchronization  con¬ 
nectors  for  Novell  Director)7  Services  (NDS)  and  Micro¬ 
soft  Exchange,  revolve  around  Active  Directory  as  the 
authoritative  director)7.  Both  mechanisms  are  less  desir¬ 
able  than  a  metadirector)7 

The  Via  move  also  shows  Microsoft  understands 
that  IT  executives  are  not  willing  to  go  through  ago¬ 
nizing  political  and  cultural  battles  that  punctuate  a 
move  to  centralized  authority  over  corporate  data. 

Now  Microsoft  has  a  proven  technology  that  has 
been  developed  for  the  past  three  years  by  the  lead¬ 
ing  metadirector)7  vendor. 

The  prevailing  question,  however,  for  the  100  IT 
shops  that  have  deployed  Zoomit  and  the  100  others 
that  are  implementing  it,  is  how  will  Microsoft  inte¬ 
grate  Via? 

Microsoft  will  preserve  Via’s  interoperability  tools 
but  make  the  product  easier  for  a  wider  range  of 
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M  eta  directory  technology 
putting  Micros  oft- centric 
view  of  directory  to  rest . 


customers  to  use,  perhaps  by  adding  templates  or 
preconfigured  rules,  according  to  Peter  Houston,  lead 
product  manager  for  Active  Directory.  Integration  of 
Active  Directory  and  Via  is  not  expected  until  the 
first  half  of  next  year. 


Microsoft  late  last  month  met  with  some  Zoomit 
customers  individually  and  squelched  fears  it  would 
disfigure  Via. 

“Microsoft  really  does  get  it,”  says  Don  Bowen, 
directory  architect  for  a  large  heavy  equipment  man¬ 
ufacturer  in  the  Midwest,  after  meeting  with  Micro¬ 
soft  officials.  The  most  important  pieces  for  connect¬ 
ing  directories  are  the  tools,  such  as  Zoomit,  he  says. 
“I  feel  good  about  the  acquisition,  but  right  now  I 
have  faith  Microsoft  will  do  the  right  thing.” 

Bowen  does  not  want  to  replace  his  current  enter¬ 
prisewide  Netscape  directory  with  Active  Directory. 
He  also  wants  to  maintain  the  ability  to  designate 
authoritative  directories  and  synchronize  director)7 
entries  down  to  the  attribute  level.  Microsoft  officials 
say  Via  will  continue  to  support  that. 

What  Microsoft  intends  to  highlight  initially  in  Via 
is  called  the  “join.”The  join  takes  user  data  from  dis¬ 
parate  directories  and  ties  it  together  into  a  universal 
user  identity.  For  example,  a  user  can  be  listed  as  Joe 
User  in  the  e-mail  system,  J  User  in  an  application 
directory,  Joe  R.  User  in  the  human  resources  database 
and  UserJ  in  the  NOS  director)7.  The  join  understands 


that  all  those  unique  names  represent  one  person  and 
creates  a  Joe  User  object  in  the  metadirectory. 

The  join  capability  provides  the  ability  to  manage 
users  in  a  central  place  without  having  to  change 
existing  user  IDs. 

“If  you  tell  enterprise  customers  to  change  all  their 
user  IDs,  they  would  laugh  at  you,”  Houston  says. 
“With  Zoomit,  you  keep  what  you  have  in  place.” 

In  that  respect,  Via  allows  flexibility,  one  of  the 
most  important  characteristics  of  an  enterprisewide 
directory,  according  to  Jamie  Lewis,  president  of  The 
Burton  Group,  an  analyst  firm  that  concentrates  on 
director)7  issues.  The  flexibility  gives  users  decentral¬ 
ized  control  of  data  while  maintaining  centralized 
integration  and  management. 

The  join  uses  Via’s  brokering  and  rules  engine. 


The  brokering  engine  aggregates  user  information 
into  a  single  object.  It  also  detects  changes  in  directo¬ 
ries,  propagates  them  through  the  infrastructure,  and 
tracks  objects  if  they  change  places  in  the  directory 
structure  (see  graphic). The  rules  engine  determines 
what  the  broker  can  and  can’t  do,  such  as  accessing 
data  that  is  not  stored  in  the  metadirectory. 

“The  rules  engine  is  as  core  to  the  metadirectory 
as  triggers  and  stored  procedures  are  in  the  database 
world,”  Houston  says. 

The  bottom  line  is  that  the  metadirectory  ties  direc¬ 
tories  into  a  logical  whole  creating  an  infrastructure 
to  support  users,  applications  and  security. 

The  concept  also  is  catching  favor  with  Novell. 
The  company  recently  unveiled  its  DirXML  feature 
for  NDS  8.0,  which  uses  XML  to  present  unified 
director)’  data  to  networked  applications. 

"The  industry  has  talked  about  a  single  corporate 
director)7,  but  it  makes  sense  to  leave  existing  direct¬ 
ories  where  they  are  and  integrate,"  says  Allen  Moffett, 
solutions  architect  for  Banyan  Systems,  which  last 
month  launched  a  directory  consulting  division. 
"Microsoft  now  has  a  much  better  story  on  that.”  3 


Mapping  the  metadirectory 


The  metadirectory  technology  Microsoft  acquired  with  Zoomit  allows  Active  Directory 
to  be  a  repository  for  directory  information.  The  Zoomit  engine,  called  Via,  adds 
intelligence  for  synchronizing  changes  across  directories  and  enforcing  rules  for 
sharing  and  cataloging  directory  data. 


©  A  user  is  added  to  the  human  resources  database. 
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©  Zoomit,  running  on  an  NT  server  with  Active  Directory, 
recognizes  the  addition  and  begins  propagating  the  new  user 
to  numerous  directories. 


Zoomit  can  create  an 
e-mail  account  on 
multiple  e-mail 
platforms.  It  also  can 
add  users  and  grant 
permissions  for  other 
directory-enabled 
applications,  such  as 
SAP  or  Baan,  and  add 
users'  information  to 
other  NOS  directories. 
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Ask 


Dr  Intranet 


By  Steve 
Blass 

I'm  an  intranet 
administrator 
with  a  Unix  back¬ 
ground  moving 
into  a  Windows  NT 
network  that  is  ex¬ 
periencing  difficul¬ 
ties.  I'm  looking  for  a  Windows 
version  of  the  TCP/IP  traffic¬ 
monitoring  tool  tcpdump  so  I 
can  use  my  collection  of  Perl 
scripts  built  for  analyzing  tcp¬ 
dump  network  traces.  Do  you 
know  where  I  can  find  a  Win¬ 
dows  version  of  tcpdump? 

In  addition.  I'd  like  to  build  a 
basic  network  security  monitor. 
Where  can  I  find  information 
about  what  kinds  of  traffic  are 
indicative  of  a  hacking  attack? 

Via  the  Internet 

You  can  find  a  free  version  of 
tcpdump  for  Windows  at  http:// 
netgroup-serv.polito.it/analyzer. 
The  utility,  Windump,  even 
reads  Unix-generated  tcpdump 
output  files.  Also  see  Network 
World  Fusion's  Security  Alert, 
daily  security  news  and  bul¬ 
letins  at  www2.nwfusion.com/ 
security/bulletins.html. 

You  can  find  information 
about  how  hackers  attack  sys¬ 
tems  from  many  sources,  in¬ 
cluding  www.cert.org.  You  can 
find  security-related  'Net  mail¬ 
ing  lists  by  searching  on  the 
phrase  "network  security." 

One  source  of  information 
about  hacking  strategies  is  the 
set  of  tcpdump  trace  files  from 
the  Def  Con  "Capture  the  flag" 
net,  on  which  about  150  hackers 
tried  to  break  into  each  other's 
systems  and  target  servers. 
There  are  about  200M  bytes  of 
these  log  files  available  in  1M- 
to  2M-byte  files  from  www. 
securitywizards.com.  There  is  a 
live  demo  available  at  http:// 
24.6.138.242. 

Blass  is  a  network  archi¬ 
tect  at  Sprint  Paranet  in 
Houston.  You  can  reach  him 
at  drintranet@paranet.com. 


An  Inside  Look  at  the  Technologies 
and  Standards  Shaping  Your  IMetwork 


Voice  over  DSL  sounds  promising 


B  Y  GREG  LAN  G  D  O  N 

Digital  subscriber  line  (DSL) 
service  to  date  has  been  used 
for  moving  data  over  the 
Internet  at  high  speeds  through  existing 
copper  links.  However,  a  new  class  of 
equipment  will  broaden  DSL’s  useful¬ 
ness  by  allowing  the  movement  of  voice 
and  data  simultaneously  over  a  single- 
copper  link,  without  architectural 
changes  to  existing  networks. 

The  payoff:  Smaller  organizations  will 
soon  be  able  to  buy  integrated,  richly  fea- 


at  each  end  of  the  local  loop. The  types  of 
equipment  needed  for  customer  premises 
and  central  offices  are  the  next-generation 
integrated  access  device  (NG-LAD)  and 
voice  gateway,  respectively. 

The  NG-1AD  eliminates  the  DSL 
modem,  bridge  or  router  for  data  commu¬ 
nications  by  interfacing  PCs  or  PC  net¬ 
works  to  the  DSL  service,  encapsulating 
IP-based  data  into  ATM  for  DSL  transmis¬ 
sion  and  handling  functions  such  as  rout¬ 
ing  and  IP  address  management.  At  the 
same  time,  the  NG-LAD  provides  the  DSL 
interface  for  voice  equipment  such  as  tele¬ 


a  Class  5  voice  switch.  Data  received  at 
the  DSI.AM  is  carried  as  packet  or  cell 
traffic  to  its  destination,  typically  an  ISP 
or  corporate  network,  just  as  in  current 
DSL  service. 

This  service  can  be  readily  and  seam¬ 
lessly  integrated  into  existing  nets  Hie  use 
of  a  NG-LAD  at  the  customer  premises 
ensures  that  the  impact  on  the  voice  and 
data  equipment  is  small.  Also,  a  voice  gate¬ 
way  converts  voice  traffic  between  voice 
over  ATM  and  the  traditional  formats  used 
in  existing  phone  nets. 

One  of  the  primary  benefits  of  inte¬ 


HOW  IT  WORKS 


©  At  the  carrier's  central  office,  a  DSLAM  sends 
encapsulated  voice  traffic  to  voice  gateway,  which 
converts  that  traffic  to  conventional  voice  signals. 


Voice  and  data  over  DSL 

Extending  the  data  capabilities  of 
DSL  services  to  include  voice  will 
give  organizations  of  all  sizes  access 
to  benefits  that  have  until  now  been 
enjoyed  only  by  big  companies. 


©  A  NG-IAD  on  the  customer  site  encapsulates  IP-based 
data  into  ATM  for  DSL  transmission  and  handles 
routing  and  IP  address  management. 


©  The  use  of  ATM  as  Layer  2  DSL  transport 
protocol  lets  diverse  traffic  types  travel 
over  a  single  copper  link. 


Data  service 
network 


Voice  service 
network 


tured  voice/data  services  in  a  way  previ¬ 
ously  available  to  only  the  largest  firms. 

All  the  major  telephone  companies 
have  standardized  on  ATM  as  the  Layer  2 
DSL  transport  protocol.  In  DSL  data 
applications,  stand-alone  or  networked 
PCs  connect  to  a  DSL  modem,  bridge  or 
router,  which  function  as  network  end¬ 
points  and  provide  a  high-speed  inter¬ 
face  to  the  DSL  service. The  DSL  modem, 
bridge  or  router  encapsulates  the  PCs’ 
IP-based  data  into  ATM  and  transmits  the 
resulting  cell  flows  as  ATM  over  DSL  to 
the  carrier’s  central  office.  At  the  central 
office,  ATM  traffic  from  multiple  DSL 
links  is  aggregated  and  multiplexed  onto 
a  common  upstream  link,  and  each  cell 
flow  is  directed  toward  its  destination 
by  one  or  more  ATM  switches. 

DSL  links  are  ready-made  for  voice/ 
data  integration.  ATM  is  designed  to  simul¬ 
taneously  transmit  diverse  traffic  types 
over  a  common  net  and  does  an  excep¬ 
tional  job  differentiating  traffic  into  dis¬ 
tinct  classes  of  service.  What’s  needed  to 
enable  integrated  voice/data  over  DSL  is 
equipment  that  supports  voice  over  ATM 


phones,  fax  machines,  key  systems  and 
PBXs,  and  sends  and  receives  voice  over 
ATM  on  the  same  DSL  line.  Because  ATM 
excels  at  simultaneous  transmission  of 
voice  and  data,  the  result  is  toll-quality 
telephone  service  with  enhanced  calling 
features  intact,  and  continuous,  high¬ 
speed  Internet  access  or  remote  LAN 
access  over  a  single  twisted  copper  pair. 

At  the  carrier’s  central  office,  a  voice 
gateway  completes  the  picture  for  inte¬ 
grated  voice/data  over  DSL.  Encapsulated 
voice  traffic  received  at  the  carrier’s  DSL 
Access  Multiplexer  (DSLAM)  is  sent  to 
the  voice  gateway,  where  it  is  converted 
to  conventional  voice  signals  and  sent  to 
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grated  voice/data  over  DSL  is  the  ability 
to  purchase  all  voice  and  data  services 
from  a  single  provider  while  gaining 
very  high-speed  data  communications. 
Any  business  of  any  size  will  be  able  to 
enjoy  the  simplicity  of  a  single  point  of 
contact  for  customer  service,  billing, 
expansion  of  services  and  management. 

Another  benefit  is  NG-IADs  can 
dynamically  make  under-used  voice-traf¬ 
fic  bandwidth  available  to  data  traffic. 

'Hie  market  for  NG-IADs  has  just  begun 
to  emerge  as  vendors  explore  the  require¬ 
ments  for  offering  bundled  services  using 
DSL  and  a  single  copper  pair.  Technology 
demonstrations  of  NG-LAD  and  voice  gate¬ 
way  products  working  together  have  pro¬ 
vided  proof  of  concept.  Although  there 
are  limited  equipment  offerings  that  can 
provide  this  functionality  today,  a  number 
of  options  will  be  available  by  next  year 
and  widespread  adoption  should  follow. 

Langdon,  vice  president  of  marketing 
at  Efficient  Netivorks,  a  DSL  CPE  supplier 
in  Dallas,  can  be  reached  at  GLangdon@ 
efficient.com  or  (972)  991-3884. 
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Gearhead  —  inside  the  network  machine  .  Mark  Gibbs 


Getting  a  handle  on  RIFF  audio  and  video  formats 


Multimedia  has  become  one 
of  the  driving  forces  of  our 
industry.  And  underneath  it  all  is  a 
cornucopia  of  technolog)',  some  of 
which  may  surprise  you.  For  exam¬ 
ple,  one  of  the  most  common  stan¬ 
dards  for  multimedia  data  is 
Microsoft’s  Resource  Interchange 
File  Format  (RIFF). 

“RIFF?”  you  may  be  saying,  “Never 
heard  of  it!” 

Au  contraire,  my  friend,  you  have 
come  across  it  in  the  guise  of 
Waveform  (WAV)  audio  content 
and  Audio  Video  Interleave  (AVI) 
video  files. 

Actually,  many  types  of  content 
can  be  encoded  in  RIFF  format: 
Bitmapped  image  data  as  RDI  files, 
MIDI  musical  data  as  RMI  files, 
and  collections  (called  bundles)  of 
RIFF  files  as  BND  files.  But  it  turns 
out  that  the  only  RIFF-type  formats 
that  have  been  implemented  are  AVI 
and  WAV. 

RIFF  files  are  binary  files  built 
from  multiple  nested  data  structures 
called  “chunks”  (think  of  a  bag  hold¬ 
ing  two  or  three  bags  that  each  con¬ 
tains  different  items). 

Each  chunk  starts  with  an  ID 


marker  to  identify  the  data  followed 
by  a  value  giving  the  size  of  the 
chunk  data.  After  that  comes  the 
actual  data. 

The  largest  chunk  (the  biggest 
bag)  identifies  the  content  as  being 
in  RIFF  format.  If  the  data  is  in  little- 
endian  ordering  (the  least  significant 
byte  is  in  the  lowest  address  in  a 
multibyte  value)  the  ID  marker  reads 
“RIFF”  while  big-endian  ordering 
(the  opposite  of  little-endian)  reads 
“RIFX.”  (There  is  no  ID  for  middle- 
endian  ordering,  but  because  that 
died  with  the  likes  of  Digital’s  PDFs, 
it  probably  doesn’t  inconvenience 
anyone.) 

WAV  files  are  simple.  They  are 
uncompressed  8-  or  1 6-bit  sound 
samples  prefaced  by  a  header  that 


declares  the  data  to  be  of  WAV  type 
and  the  specification  of  how  the 
audio  data  is  formatted. 

The  header  usually  specifies  Pulse 
Code  Modulation  (PCM),  which  rep¬ 
resents  the  sound  as  a  sequence  of 
sampled  values. 

Other  WAV  chunks  specify  the 
sample  rate  used  —  typically  11,025 
sample/sec  for  telephone  quality, 
22,050  sample/sec  for  radio  quality, 
or  44,100  sample/sec  for  CD  quality. 
(All  you  telco  types  please  note  that 
is  samples,  not  bits,  per  second.)  The 
chunks  also  state  the  number  of 
audio  channels,  which  is  usually  one 
(for  mono)  , while  two  (stereo)  is  not 
uncommon.  It  is  possible  to  encode 
up  to  6 5,536  channels  (death  by  sur¬ 
round  sound,  perhaps). 

In  an  AVI  file,  the  chunk  inside  the 
RIFF  chunk  has  an  ID  of  “AVI”  and 
contains  subchunks  that  describe 
the  parameters  of  the  movie  as  well 
as  the  movie  frames  and  audio  data 
(in  WAV  format). 

We  don’t  have  the  space  to  go 
into  the  parameters  in  detail  as  there 
are  a  lot  of  them  required  to  define 
the  contents,  but  they  include  the 
time  delay  between  frames,  number 


of  frames  stored,  and  the  height  and 
width  of  the  video  frame. 

Working  with  AVI  is  easy  —  there 
are  plenty  of  tools  to  simplify  conver¬ 
sion  to  and  from  other  formats  such 
as  MPEG  and  MOV  Converting  video 
tape  to  AVI  format  is  supported  by  a 
range  of  image  capture  boards. 

Editing  of  AVI  is  also  straight¬ 
forward  using  tools  such  as 
Adobe  Premier  (www.adobe.com), 
although  you  would  be  advised  to 
use  the  fastest  platform  you  can  lay 
your  hands  on. 

There  are  also  many  graphics 
applications  that  output  AVI  files 
directly.  Gearhead  has  had  great  suc¬ 
cess  with  Asymetrix  Web  3D  (www. 
asymetrix.com),  which  provides  a 
simple  and  effective  drag-and-drop 
3D  animation  environment. 

Multimedia,  including  WAV  and 
AVI  technologies,  are  going  to  be 
key  elements  of  your  IT  environ¬ 
ment.  Gearhead  will  he  looking  at 
more  multimedia  technology  in 
future  columns,  so  let  us  know 
what  related  topics  you’d  like  to  see 
covered.  Present  your  thoughts  to 
gh@gibbs.com. 
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main  Technology  Update 
story,  and  you  want  to  learn 
more?  Hey,  isn’t  that  what 
the  Web’s  for?  You  bet! 

Come  online  for  addition¬ 
al  resources,  including  a 
white  paper  from  Efficient 
Networks  on  the  topic,  links 
to  the  ADSL  Forum’s  specifi¬ 
cations  for  ATM  over  DSL 
(the  underlying  technology 
used  to  push  voice  traffic 
over  DSL  links)  and  a  look  at 


one  company  that’s  building 
hardware  and  software  for 
the  market.  Or  if  you  want 
to  back  up  a  moment  and 
bone  up  on  digital  sub¬ 
scriber  line  in  general, 
we’ve  got  a  whole  series  of 
links  for  you,  including 
primers  (on  all  the  flavors 
of  DSL),  forums  and  the 
latest  DSL  news  from 
Network  World. 

DocFinder:  4031 


Help  Desk 

This  week,  Ron  Nutter 


offers  insight  on  technical 
certification  preparation.  A 
reader  says  his  company  is 
using  an  increased  number 
of  Cisco  routers,  and  he 
wants  to  be  better  trained  to 
use  them.  He  wants  to  take 
the  Cisco  Certified  Network 
Associate  exam  but  isn’t 
sure  how  to  prepare.  Find 
out  what  study  guides 
Nutter  suggests  and  his  tips 
for  hands-on  practice. 

DocFinder:  4029 

A  cache-y  forum 

Don’t  just  read  our  Face- 
off  this  week  on  enterprise 
Web  caching.  Read  the  argu¬ 
ments  on  either  side,  then 
jump  online  to  debate  and 
pose  questions  to  our  guest 
columnists  (and  other 
Fusion  users). 

Plus,  we’ll  provide  the 
links  to  all  manners  of 
caching  primers  and  news 
from  Network  World  and 
around  the  Internet. 

DocFinder:  4022 


The  name  game 

One  thing  we  learned 
from  our  Great  Server  Name 
Bake-off  is  that  a  lot  of  you 
like  “South  Park,”  the 
Muppets  and  planets  —  at 
least  based  on  the  names 
you  gave  your  servers. 

We  also  learned  some  of 
you  have  a  mischievous 
streak  —  also  based  on  the 
names  that  you  gave  your 
servers. 

Take,  for  example,  the 
department  that  named  one 
server  “Sun”  in  honor  of  a  boss 
who  thought  everything 
revolved  around  her,  or  the 
guy  who  numbered  one  user’s 
network  segment  666  after 
the  user  complained  about  a 
server  named  “Beelzebub.” 

Now  comes  the  hard  part 
for  us:  Deciding  who  wins 
the  Dell  PowerEdge  1300 
server  we’re  awarding  to  the 
best  entry.  Look  for  the 
winner’s  announcement  in 
the  forum. 

DocFinder:  3732 


SLAs 

We’ve  put  together  a 
guide  to  resources  on  ser¬ 
vice-level  agreements,  for 
WAN  services  and  on  your 
network. 

Start  off  with  a  couple 
primers  that  introduce 
the  key  concepts,  then 
dive  deeper  with  articles 
that  tell  you  what  to  ask 
for  in  your  carrier  con¬ 
tract  negotiations  and  how 
to  write  a  detailed  SLA 
for  your  own  users  on 
your  internal  network. 

DocFinder:  4032 
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What  is  the  best  approach  to  enterprise  caching  ! 
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Does  the  best  caching  method  include  dedicated  hardware?  Entera  says  no;  InfoLibria  says  yes. 


BY  JOHN  SCHARBER 


BY  SOLOM  HEDDAYA 


A  cache  proxy  server  is  much  like  a  file  server  —  a  set  of  specialized 
software  that  runs  on  general-purpose  hardware. The  proxy  server  buffers 
the  Internet  and  isolates  it  from  outages.  The  software  actually  does  the  work: 
the  hardware  wrapped  around  most  cache  appliances  is  just  an  industrial- 
strength  PC. 

Using  an  appliance  for  caching  locks  you  into  an  expensive  hardware  box 

without  the  flexibility  to  upgrade  as  faster 
hardware  becomes  available.  Appliance  ven¬ 
dors  rely  on  software  tuning  to  improve 
performance  because  after  the  purchase 
you  are  anchored  with  outdated  hardware. 

Assuming  that  you  have  well-written  soft¬ 
ware,  tuning  your  operating  and  file  sys¬ 
tems  will  produce  some  performance 
achievements,  but  these  pale  by  compari¬ 
son  to  hardware  horsepower  advance¬ 
ments.  Recent  industry  bake-off  reviews 
have  proven  that  unless  you  put  unrealistic 
torture-test  loads  on  a  cache,  all  will  per¬ 
form  about  the  same. Tweaking  the  operat¬ 
ing  system,  kernel,  file  system  and  core 
code  path  for  a  customized  hardware  con¬ 
figuration  can  give  you  perhaps  a  20% 
improvement  in  total  cache  performance. 

In  contrast,  software  caching  products  let  you  ride  the  hardware  performance 
curve.  Moore’s  Law  dictates  that  CPU  processing  power  doubles  and  the  price 
halves  every  18  months. Therefore,  running  feature-rich,  well-tuned  cache  soft¬ 
ware  on  a  powerful  but  inexpensive  hardware  platform  guarantees  less  expen¬ 
sive,  better  performance  for  the  future.  Cache  appliance  vendors  are  using  PC- 
based  hardware  to  ride  this  curve;  look  carefully  under  the  hood  to  make  sure 
they’re  passing  those  benefits  on  to  you. 

For  example,  running  a  well-written  piece  of  commercial  caching  software  on  a 
quad-Xeon  PC  —  or  whatever  the  fast  chip  du  jour  happens  to  be  —  can  instantly 
give  you  two  times  the  performance  or  more.  Compare  that  to  simple  software 
tuning,  feature  adding  or  other  schemes  that  may  at  best  produce  only  a  10%  to 
20%  performance  bump  and  at  worst  could  actually  reduce  overall  performance. 

More  significantly,  cache  appliance  vendors  may  have  optimized  too  quickly 
and  too  narrowly.  The  Internet  is  still  evolving,  and  your  appliance  might  not 
have  what  it  takes  to  keep  up. 

Although  choosing  the  best  hardware  will  give  you  the  best  price/perfor¬ 
mance,  you  still  need  to  shop  carefully  when  buying 
software.  Cache  products  can  be  most  clearly  differenti¬ 
ated  in  software  features.  New  protocols  emerge  quickly 
on  the  Internet;  caches  need  to  be  able  to  support  these 
just  as  quickly.  Software  products  —  particularly  those 
with  plug-in  architectures  —  are  better  suited  to  these 
changes  than  special-purpose,  HTTP-only  appliances. 


Scharber  is  president,  CEO,  chief  technology  officer 
and  co-founder  of  Entera,  an  Internet  content  delivery 
systems  company  in  Fremont,  Calif.  He  can  be  reached 
at  js@entera.com. 


More 


Online 


*  Want  to  add  your  2  cents  to  this  debate?  Air  your 
views  in  our  Fusion  Face-off  running  through 
Aug.  6.  Scharber  and  Heddaya  will 
be  adding  their  thoughts 
to  the  discussion. 


For  networks  with  relatively  low  performance  and  reliability  demands,  proxy 
servers  may  make  sense.  But  for  companies  that  count  on  connectivity,  a 
caching  appliance  is  the  better  option. 

A  true  caching  appliance  is  more  than  software  running  on  dedicated  hard¬ 
ware;  it  is  an  integrated  system  containing  at  least  some  components  that  are  cus¬ 
tom-built  for  the  caching  function.  The  remaining  components  must  be  specially 
configured  and  tuned  as  well.  The  caching 
appliance  consists  of  the  network  hardware 
and  software,  the  operating  system  kernel, 
file  system,  cache  server  and  system  manager. 

Caching  appliances  offer  a  number  of 
advantages  over  software-only  offerings. 

First,  an  integrated  system  combining  soft¬ 
ware  and  hardware  is  easier  to  install. 

Appliances  just  need  to  be  plugged  in  and 
given  an  IP  address. 

Second,  an  appliance  is  more  reliable. 

Software  caches  are  compromised  by  any 
lack  of  reliability  in  other  system  compo¬ 
nents  —  software  or  hardware  —  that  are 
not  under  the  control  of  the  cache  designer. 

Even  simple  human  errors  in  configuring  the 
various  components  in  a  consistent  way  can 
cause  a  loss  in  the  caching  function. 

Third,  integrated  software  and  hardware  provide  higher  performance.  General- 
purpose  operating  systems  expend  significant  resources  to  ensure  that  compet¬ 
ing  applications  share  the  machine  safely  and  fairly.  Achieving  high-performance 
caching  requires  the  elimination  of  much  of  this  redundant  overhead,  as  well  as 
the  placement  of  caching  functionality  as  low  as  possible  in  the  layers  of  the  sys¬ 
tem.  None  of  these  optimizations  can  be  done  in  a  software-only  caching  prod¬ 
uct,  which  cannot  change  system  software  outside  the  caching  application  itself. 

Fourth,  total  cost  of  ownership  is  less  for  an  appliance.  Initially,  caching  soft¬ 
ware  can  be  less  expensive,  but  over  time,  the  increased  management  costs  sur¬ 
pass  the  cost  of  buying  an  appliance  in  the  first  place. 

Fifth,  an  appliance  is  easier  to  manage.  You  can  manage  appliance  caches  as  a 
single  unit,  whereas  software  caches  require  you  to  separately  manage  other 
caching  components,  such  as  the  operating  system  kernel  and  hardware. 

Finally,  an  appliance  is  more  secure.  Appliances  are  inherently  difficult  to 
break  into  because  they  can  completely  shut  down  many  of  the  network  ser¬ 
vices  typically  required  of  a  general-purpose  host  computer  running  a  software 

cache.  Intruders  often  use  these  network  services  to 
break  into  a  system. 

Software  caches  can  be  useful  in  situations  in  which 
performance  and  reliability  are  not  critical  and  strong  sys¬ 
tem  management  expertise  is  widely  available  and  inex¬ 
pensive.  In  general,  however,  cache  appliances  represent  a 
more  beneficial  approach  for  today’s  large  enterprises. 


www.nwfusion.com 


Heddaya  is  vice  president,  research  and  archi¬ 
tecture,  at  InfoLibria,  a  netivork  infrastructure 
company  in  Waltham,  Mass.  He  can  be  reached  at 
aheddaya@infolibria.com. 
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Editorial  Insights 

Going  great  guns,  Covad 
is  worthy  of  watching 

As  a  matter  of  course,  we  revisit  the 
companies  we  name  to  our  “10 
Companies  to  Watch”  list  to  see  if 
we  were  on  the  mark  (NW,  April 
26,  page  73). 1  just  got  back  from  Covad 
Communications,  the  king  of  DSL,  and  I’m 
happy  to  report  the  com¬ 
pany  is  thriving. 

Order  rates  for  the  DSL 
local  access  links  the  com¬ 
pany  installs  for  ISPs  are  dou¬ 
bling  every  quarter.  Covad 
has  DSL  Access  Multiplexers 
(DSIAM)  in  440  central 
offices  (on  its  way  to  having 
1 ,000  by  year-end)  and  some 
20,000  lines  installed  in  17 
out  of  22  targeted  regions. 
Areas  served  today  include 
San  Francisco,  Los  Angeles  and  New  York. 

In  San  Francisco,  a  region  that  includes 
Oakland  and  surrounding  towns,  there  are  143 
local  exchange  carrier  central  offices.  Covad 
has  DSLAMs  in  80  of  these. 

The  company  can  charge  into  a  region  that 
fast  by  using  a  success-based  deployment 
model.  When  Covad  enters  a  city,  it  installs 
empty  DSIAM  racks  but  doesn’t  populate  the 
racks  with  expensive  electronics  until  demand 
dictates. That  strategy  limits  upfront  financial 
commitments  and  exposure. 

By  comparison,  upgrading  cable  TV  systems 
to  support  cable  modems  —  the  technology  to 
which  DSL  is  most  often  compared  —  typically 
requires  tremendous  upfront  re-engineering 
costs  before  a  single  user  can  be  supported. 

While  Covad  views  the  ISPs  that  sell  its  ser¬ 
vice  as  its  primary  sales  channel,  it  also  sells 
some  end-to-end  services  directly.  Companies 
such  as  Cisco  and  Oracle  lease  T-l  orT-3 
access  trunks  into  Covad’s  national  ATM  net¬ 
work.  That  network  links  regional  ATM  nets 
that,  in  turn,  connect  the  DSLAMs. 

Covad  says  a  144K  bit/sec  link  to  a  remote 
office  starts  at  $155  per  month,  compared  to 
$800  per  month  for  a  128K  bit/sec  frame  relay 
link  (the  frame  price  includes  WAN  access, 
port  charge  and  permanent  virtual  circuit  fee). 

It  is  the  ATM  core  that  will  enable  Covad  to 
ultimately  branch  into  voice  services,  which 
the  company  has  already  begun  testing. 

While  everything  is  adding  up  in  Covad’s 
favor  and  the  future  looks  bright,  the  question 
remains:  How  will  it  fair  in  the  long  run  if 
AT&T  can  get  its  cable  TV  holdings  to  support 
two-way  everything? 

Given  the  enormity  of  that  task,  I  like 
Covad’s  near-term  chances.  Keep  watching. 


—  John  Dix,  editor 
jdix@nww.  com 
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All  choked  up 

Jeffrey  Fritz’s  story  “Gigabit  choke  points”  (July 
5,  page  35)  is  a  well-done  analysis  that  makes 
some  good  points.  However,  I  think  that  in  a 
sense  he  measured  the  wrong  thing. 

What  he’s  shown  is  that  typical,  current  net¬ 
work  equipment  doesn’t  have  the  throughput 
to  take  advantage  of  Gigabit  Ethernet.  But  I’m 
not  sure  that  end-to-end  throughput  is  really  the 
issue  in  most  networks.  Rather,  the  issue  is  the  total 
available  bandwidth. 

A  10M  bit/sec  Ethernet  is  plenty  of  throughput 
for  99  9%  of  what  people  want  to  do.The  problem 
is,  you  need  a  whole  lot  of  bandwidth  in  the  core  to 
give  every  user  the  10M  bytes  he  needs.This  is  the 
problem  that  Gigabit  Ethernet  is  supposed  to  ad¬ 
dress.  So  what  would  be  interesting  to  test  is  how 
much  bandwidth  you  can  really  get  out  of  a  gigabit 
core.  The  fact  that  one  server  and  one  client  only  use 
2%  of  the  total  bandwidth  is  hardly  surprising.  How 
about  20  servers  and  2,000  clients? 

A.  Michael  Berman 

Associate  provost  for  information  resources 
Rowan  University 
Glassboro,  NJ. 

Jeffrey  Fritz’s  story  “Gigabit  choke  points”  introduced 
some  interesting  and  perhaps  obvious  flaws  in  the 
deployment  of  Gigabit  Ethernet.  I  emphasize  deploy¬ 
ment  simply  because  Fritz  makes  it  clear  that  today’s 
hardware  is  not  ready  for  this  technology.  But  what 
about  on  the  backbone?  My  company  is  in  the 
process  of  expanding  its  LAN  and  is  considering 
using  Gigabit  Ethernet  between  data  centers.  We  are 
currently  using  Fast  Ethernet  and  would  like  to  keep 
our  network  native  to  the  Ethernet  family.Any  recom¬ 
mendations? 

James  Graves 
Director  of  IT 
Multek 
Irvine,  Calif 

Fritz  responds:  If  your  Fast  Ethernet  backbone  is 
becoming  overwhelmed,  then  Gigabit  Ethernet  is 
definitely  a  way  to  go.  But  if  you’re  coasting  along 


on  the  backbone,  you  may  not  need  an 
upgrade  at  all,  even  if  you  expand  your  LAN. 

I  urge  readers  who  are  interested  in  Gigabit 
Ethernet  issues  to  participate  in  the  forum  on 
www.  nwfusion.  com/forum/choke,  html. 

Not  ready  for  prime  time 

Regarding  your  editorial  “Users  and  carriers  split 

on  managed  services”  (July  5,  page  32): 

As  much  as  I  agree  with  the  statements  regard¬ 
ing  the  dearth  of  technical  talent  available  to  enter¬ 
prise  network  managers  and  the  pace  of  technology 
changes  they  face,  I  am  not  convinced  that  carrier 
managed  services  are  the  solution,  for  several  reasons. 

First,  managed  services  are  still  a  revenue  blip  to 
major  service  providers.  Therefore,  service  providers 
are  still  spending  most  of  their  capital  dollars  on 
acquisition,  voice  and  Internet  transmission.  Managed 
services  are  an  afterthought.  Result:  limited  automa¬ 
tion,  limited  staff  and  half-baked  services. 

Second,  service  provider  sales  personnel  are  ill  pre¬ 
pared  to  gather  the  technical  and  business  data  re¬ 
quired  to  successfully  implement  managed  services. 
There  is  a  gigantic  difference  between  selling  min¬ 
utes  and  managing  an  enterprise  WAN. 

Third,  service  providers  are  struggling,  just  like  the 
enterprise,  to  hire  and  retain  the  individuals  needed 
to  deliver  managed  services.  With  more  than  5,000 
service  providers  and  integration  companies  all  vying 
for  talent,  few  service  providers  are  prepared  to  offer 
the  salary  and  stock  plans  that  will  entice  high-end 
personnel  to  managed  services  organizations.  As  a 
result,  many  service  providers  are  using  third  parties, 
such  as  INS,  to  deliver  these  services. 

Fourth,  some  enterprise  WANs  are  just  too  com¬ 
plex,  or  are  managed  at  service  levels  that  are  just 
too  high,  for  service  providers  to  capably  and  prof¬ 
itably  manage  them. 

Managed  services  are  a  good  method  for  dealing 
with  staff  shortages  in  simple,  straightforward  imple¬ 
mentations.  However,  a  blanket  “you  should  all  be  uti¬ 
lizing  managed  services”  sounds  like  “voice  over  IP  is 
free”  —  all  hype. 

Deb  Mielke 
Principal 

Treillage  Network  Strategies 
McKinney,  Texas 


Send  letters  to  nwnews@nww.com  or  John 
Gallant,  editorial  director,  Network  World, 
161  Worcester  Road,  Framingham,  MA 
01 701.  Please  include  phone  number  and 
address  for  verification. 
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Venture  Over  the  Horizon  .  Kevin  Fong 

Determining  whether  a  start-up  is  showplace  or  fixer-upper 


As  a  venture  capitalist,  people  are  always  asking 
me,  “How  do  you  determine  the  value  of  a  busi¬ 
ness  idea? "The  real  estate  market  provides  an 
excellent  analogy.  Anyone  who  has  dealt  with 
real  estate  appraisals  knows  that  two  key  ele¬ 
ments  are  location  and  comparables  —  what 
similar  houses  in  the  neighborhood  are  selling  for. 

In  the  case  of  a  private  company  valuation,  sub¬ 
stitute  industry  sector  for  location.  For  example,  an 
Internet-related  start-up  would  be  the  equivalent  of 
a  multimillion-dollar  home  in  an  exclusive  commu¬ 
nity.  A  communications  start-up  would  be  equiva¬ 
lent  to  a  million-dollar  home  in  an  upper-middle 
class  area.  An  enterprise  software  start-up  would  be 
comparable  to  a  half-million  dollar  home  in  the  nice 
middle-class  part  of  town. 

A  house’s  condition  also  affects  its  salability.  Is  it 
ready  for  occupancy  tomorrow?  Or  is  it  a  fixer-upper 
that  is  going  to  take  work  to  make  it  habitable? 

To  determine  a  venture’s  salability,  venture  capital¬ 
ists  look  at  a  number  of  issues: 

•  Does  the  company  have  a  strong  management 


team  already  in  place  or  will  the 
investors  have  to  do  the  job  themselves 
while  they  look  for  key  managers? 

•  Is  the  company’s  business  model 
proven  or  untested? 

•  Is  the  company  entering  an  existing 
or  new  market?  If  existing,  is  that  market 
growing  or  shrinking?  If  new,  does  the 
market  have  the  potential  to  be  large? 

•  How  much  technology  risk  is  associated  with 
the  company’s  success  or  failure? 

•  What  unique  contribution  will  the  venture  capi¬ 
talist  provide  in  terms  of  strategy,  people  and  a  net¬ 
work  of  possible  partners? 

A  company  with  a  fully  formed  business  plan  and 
a  strong  management  team  would  receive  a  higher 
valuation  than  a  one  in  which  investors  would  have 
to  put  in  a  lot  of  time  and  effort. 

People  invest  in  real  estate  with  the  thought  of 
selling  for  a  profit.  In  the  case  of  venture  capitalists, 
they  look  at  what  is  called  the  “liquidity  event”  —  the 
moment  when  the  venture  capitalist  realizes  a  return 


on  his  investment,  either  through  m  irii 
tial  public  offering  or  the  sale  of  the  com¬ 
pany.  The  IPO  market,  the  merger  md- 
acquisition  environment  and  the  market 
size  for  the  company's  products  all  figure 
into  determining  the  potential  value  of 
the  liquidity  event. 

Each  venture  capitalist  fund  has  its 
own  requirements  for  valuation  driven  by  its  invest¬ 
ment  strategy.  Different  funds  will  have  different 
ways  of  providing  value,  either  through  the  amount 
of  money  invested  or  through  the  time  the  firm’s 
partners  spend  on  each  investment. 

Every  home  seller  believes  his  property'  is  special 
and  deserves  to  be  fully  valued.  Every  entrepreneur 
feels  the  same  way.  But  market  forces  are  the  ulti¬ 
mate  judge  of  value,  whether  you  are  engaging  in  a 
real  estate  transaction  or  a  venture  deal. 

Fong  is  a  general  partner  of  Mayfield  Fund,  a 
venture  capital  firm  in  Menlo  Park,  Calif  He  can  be 
reached  at  kfong@mayfield.com. 


On  Security  .  Winn  Schwartau 

Back  Orifice  is  back  and  it’s  badder  than  ever 
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Yes,  I  did  it  again.  I  flew  3,000  miles  to  Las  Vegas’ 
eyeball-searing  summer  heat  to  go  to  the  Def 
Con  7  hacker  convention.  In  attendance:  three 
thousand  hackers,  National  Security  Agency  min¬ 
ions  and  corporate  security  types,  all  sucking 
down  $1  Heinekens  24  hours  a  day.  The  focus 
of  this  gala  event:  the  release  of  Back  Orifice  2000. 

The  guys  from  the  Cult  of  the  Dead  Cow  (CDC), 
which  brought  you  the  original  Back  Orifice  last  year, 

_  have  updated  their  creation, 

which  the  CDC  modestly 
calls  “the  most  powerful  net¬ 
work  administration  tool 
available  for  the  Microsoft 
environment,  bar  none” 
(www.bo2k.com/index 
whatis.html). 

The  CDC’s  raison  d’etre  is 
to  exploit  the  lack  of  security  in  NT  and  Microsoft 
products  in  general.The  group  says  the  original  Back 
Orifice  and  Back  Orifice  2000  are  merely  remote 
administration  tools,  but  many  security  professionals 
swear  that  the  creation  of  Back  Orifice  2000  is  even 
more  of  an  attack  on  organizations. 

At  Def  Con,  the  CDC  put  on  a  rousing  show  and 
talked  about  the  great  new  features  that  Back  Orifice 
2000  boasts.  It  now  works  on  NT  rather  than  just  Win¬ 
dows  9x  boxes  and  has  a  mode  that  can  make  an  NT 
machine  look  like  it  has  gone  to  the  dreaded  Blue 
Screen  of  Death.  In  reality,  the  target  machine  is  pro¬ 
cessing  in  the  background,  under  the  control  of  who¬ 
ever  infected  it. 

The  CDC  also  added  additional  encryption  facilities 
that  are  supposed  to  make  the  program  harder  to 
detect.  But  the  most  notable  news  is  that  the  group 


plans  to  make  Back  Orifice  2000  open  source,  mean¬ 
ing  the  source  code  is  free  to  anyone.  Expect  dozens, 
if  not  hundreds,  of  copycat  versions  of  Back  Orifice 
2000  to  appear.  Hackers  will  modify  the  code  just 
enough,  they  hope,  to  avoid  detection  by  anti-Back 
Orifice  products.  More  than  300,000  copies  of  the 
original  Back  Orifice  were  downloaded.  If  even  a  small 
percentage  of  those  same  folks  download  Back  Orifice 
2000,  make  modifications  and  distribute  them,  we 
could  see  serious  problems. 

What  can  you  do?  You  could  go  to  a  whole  rash  of 
hacker  Web  sites  and  download  various  anti-Back 
Orifice  2000  products.  That  would  be  really  stupid. 
Many  of  them  merely  infect  you  with  Back  Orifice 
instead  of  protecting  you.  Your  best  bet  is  to  go  to  a 
legitimate  vendor,  such  as  an  antivirus  company,  and 
get  the  updated  signature  files,  which  are  capable  of 
detecting  and  eradicating  Back  Orifice  2000. 

However,  if  there  is  a  whole  slew  of  polymorphic- 
versions  of  Back  Orifice  2000  floating  around  out 
there,  your  job  becomes  a  lot  more  difficult. 

How  often  will  your  antivirus  software  vendor 
update  its  software?  How  often  will  you  update  your 


anti-Back  Orifice  2000  software  on  your  servers  and 
desktops? 

Since  Back  Orifice  and  Back  Orifice  2000  generally 
infect  systems  through  an  e-mail  attachment,  what 
changes  to  your  current  e-mail  policy  do  you  need  to 
make?  Will  you  allow  attachments  from  outside  the 
company  to  come  in,  and  if  so,  from  whom?  Will  you 
go  the  extreme  and  forbid  attachments?  How  do  you 
educate  your  users  quickly?  Do  they  open  e-mail 
attachments  from  people  and  e-mail  addresses  they 
don’t  know?  How  about  allowing  only  e-mail  attach¬ 
ments  from  within  the  company? 

I  have  heard  rumblings  about  a  lawsuit  against  the 
CDC.  One  group  that  does  not  want  to  be  named  is 
thinking  about  a  civil  proceeding  under  the  premise 
that  Back  Orifice  2000  is  essentially  only  harmful  and, 
therefore,  its  creators  should  pay  for  damages.The 
other  noise  is  from  law  enforcement,  which  is  think¬ 
ing  about  charging  CDC  members  under  the  Racke¬ 
teer  Influenced  and  Corrupt  Organizations  Act,  and 
conspiracy  to  violate  almost  every  computer  crime 
law  on  the  books. 

The  CDC  wants  to  make  a  point:  Microsoft  makes 
lousy  products  and  it  is  up  to  the  hackers  to  make 
fools  of  Redmond  in  public.  Microsoft,  security  ven¬ 
dors  and  corporations  see  it  differently:  They  maintain 
that  the  CDC  is  just  trying  to  legitimize  hacking  under 
the  guise  of  professional  network  management. 

No  matter  which  story  you  believe,  you  are  going  to 
have  to  deal  with  Back  Orifice  2000. 

Sch  wartau  is  chief  operating  officer  at  The  Security 
Experts  and  president  of  InfoWar.com,  both  in 
Seminole,  Fla.  He  can  be  reached  at  winn @ 
securityexperts.com  or  winn@infowar.com. 
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The  Defense  Department  is 
plodding  ahead  to  shore  up 
network  security,  but  the 
project  faces  the  same  chal¬ 
lenges  that  thwarted  a  simi¬ 
lar  initiative  before. 


Department,  and  the  National  Security  Agency  is  get¬ 
ting  jittery.  If  hackers  were  to  penetrate  these  net¬ 
works,  they  could  sort  through  personnel  records  and 
equipment  purchases  to  determine  troop  movements 
and  defense  buildups.  Moreover,  these  nonclassified 
nets  touch  networks  that  carry  more  sensitive  data, 
raising  concerns  about  a  weak  first  line  of  defense. 

So  the  NSA  and  the  Defense  Information  Systems 
Agency  (DISA)  attempted  to  build  a  new  organization 
to  shore  up  security  of  the  Defense  Department’s  net- 
works.The  initiative  was  dubbed  the  Defensewide 
Information  Systems  Security  Program  (DISSP). 

But  by  1996,  the  DISSP  had  failed,  before  accom¬ 
plishing  most  of  its  goals.  Many  close  to  the  project 
blame  the  failure  on  turf  wars,  politics  and  budget  mis¬ 
appropriations.  Even  worse,  some  of  America’s  sensi¬ 
tive  data  may  still  be  hanging  in  the  wind,  according  to 
former  Defense  Department  employees.  Even  today, 
security  is  spotty,  efforts  are  fragmented  and  some  sys¬ 
tems  still  lack  basic  protection  such  as  intrusion  detec¬ 
tion,  say  several  sources  who  left  the  Defense  Depart¬ 
ment  between  1995  and  1998. 

Last  year,  the  Department  of  Defense  picked  up  the 
pieces  and  began  the  Defensewide  Information 
Assurance  Program  (DIAP). 

“You  might  say  the  DISSP  was  unsuccess¬ 
ful  because  of  a  number  of  factors.  But  main¬ 
ly,  it  was  too  early  for  its  time  because  we 
weren’t  as  dependent  on  our  networked  ser¬ 
vices  as  we  are  today,”  says  Richard  Schaefer, 
director  of  the  DIAP  in  Arlington,  Va. 

The  DIAP  is  making  headway,  aided  in 
part  by  security  policies  and  program  frag¬ 
ments  the  DISSP  left  behind.  But  will  the 
new  group  be  able  to  overcome  the  obsta¬ 
cles  the  DISSP  faced? 

Schaefer  and  his  team  are  determined  not 
to  make  the  same  mistakes.  Nevertheless,  he 
faces  the  same  skirmish  that  plagued  the 
DISSP  —  an  ongoing  turf  battle  over  who 
controls  defensewide  network  security. 


Looking  back 

After  the  Internet  worm  wreaked  havoc  in 
1988,  the  assistant  secretary  of  Defense  for 
Command,  Control,  Communications  and 
Intelligence  (C3I)  launched  an  effort  to  orga¬ 
nize  and  secure  the  Defense  Department’s 
unclassified  networks.  In  1990,  the  C3I  direc¬ 
tor  signed  an  initial,  long-term  phase-in  plan 
that  created  the  DISSP  and  turned  its  man¬ 
agement  over  to  the  NSA  and  DISA. 

The  DISSP’s  mission:To  manage,  coordi- 


It’s  Nov.  2, 1988.  An  Internet  worm  self-replicates 
through  mail  programs  and  takes  down  10%  of 
the  file  servers  connected  to  ARPANet,  the  precur¬ 
sor  to  the  Internet.  It  takes  more  than  a  year  to 
clean  the  worm  out  of  networks  connected  to 
ARPANet,  which  includes  the  U.S.  Department  of 
Defense’s  MII.Net. 

At  the  same  time,  decentral¬ 
ized  networks  are  springing  up 
throughout  the  Defense 


nate  and  support  security  systems  and  application 
development  projects  for  military  branches  and 
Defense  Department  program  offices;  develop  stan¬ 
dards  and  protocols  for  INFOSEC  (the  NSA’s  term  for 
the  effort);  and  expedite  a  centralized  security  com¬ 
mand  post. 

In  1992,  Bob  Ayers  transferred  from  intelligence  to 
direct  the  newly  formed  DISSP.  With  him, Ayers 
brought  a  computer  emergency  response  team  called 
ASSIST.  Prior  to  transferring,  Ayers  was  chief  of  the 
Defense  Department  Intelligence  Information  System 
Computer  Security  program  for  the  Defense  Intelli¬ 
gence  Agency. 

The  program  quickly  grew  to  50  civilian  and  39 
security  specialists  imported  from  various  Defense 
Department  military  branches,  with  more  to  come. 
They  had  a  lot  of  ground  to  cover:  The  size  of  the 
Defense  Department’s  interconnected  network  is 
unknown,  but  some  say  it  supported  some  two  million 
nodes  at  the  time. 

Ayers’  team  began  assessing  the  security  of  military 
WANs  and  LANs  by  hacking  them.  After  breaking  into 
a  network,  the  response  team  would  show  techni¬ 
cians  how  to  fix  their  sites  to  meet  DISSP  security 
standards.  Other  DISSP  staffers  were  creating  overall 
security  policy  and  developing  intrusion-detection 
and  encryption  tools. 

“We  tested  28,000  Army, Air  Force,  Marines,  Navy  and 
other  Defense  Department  agency  systems  and  got 
through  on  98%  of  them,”  says  one  former  ASSIST  team 
member. “It’s  frightening  how  few  network  administra¬ 
tors  detected  us.  I  think  it  was  something  like  2% 

The  fight  for  funding 

The  penetration  testing  was  an  important  part  of 
the  entire  DISSP  program  for  one  good  reason:  money. 
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Acronym  Agency  Name 


DISA 

Defense  Information  Systems  Agency 

DISSP 

Defensewide  Information  Systems  Security  Prograi 

DIAP 

. 

Defensewide  Information  Assurance  Program 

NSA  National  Security  Agency 


Gen.  Albert  Edmonds,  head  of  the  DISA  between  1994 
and  1997,  took  the  team’s  findings  on  a  road  show  to 
convince  Congress  and  the  Joint  Chiefs  of  Staff  to  fund 
the  program. 

Meanwhile,  military  branches,  especially  the  Air 
Force,  were  conducting  security  evaluations  of  their 
own.  Under  the  newly  formed  Information  Warfare 
center,  the  Air  Force  not  only  tested  its  own  systems, 
but  some  of  the  Army’s  systems  as  well. The  Air  Force 
successfully  penetrated  half  the  systems  it  tested. 

Early  in  1994,  the  Air  Force  produced  the  smoking 
gun  needed  to  persuade  decision  makers  to  beef  up 
funding  for  the  DISSP.  It  caught  a  hacker  deep  inside 
national  defense  and  U.S.  Space  Command  Center  sys¬ 
tems.  The  hacker  had  broken  in  through  a  defense  con¬ 
tractor’s  network  connection. 

“The  Air  Force  had  never  seen  anything  like  this 
before,”  says  Kevin  Ziese,  director  of  security  technolo¬ 
gy  assessment  for  Cisco,  who  was  part  of  the  Air 
Force’s  Information  Warfare  team  until  mid- 1995.  “This 
was  the  Pearl  Harbor  scenario  [Edmonds]  was  looking 
for.  Then  a  report  was  delivered  to  several  members  of 
Congress,  the  Secretary  of  Defense,  the  Central 
Intelligence  Agency  and  the  service  chiefs.” 

The  Air  Force’s  discovery  was  part  of  the  impetus 
for  a  letter  fired  off  that  June  by  directors  of  the  NSA 
and  the  DISA  to  the  deputy  secretary  of  Defense  say¬ 
ing  current  security  levels  were  dangerously  unaccept¬ 
able.  It  asked  for  more  money  — $96  million  in  fiscal 


Mission 

DISA  is  charged  with  planning,  developing  and  supporting  the  Defense 
Department's  command,  control,  communications  and  information  systems. 

The  DISSP  is  a  defunct  initiative  to  shore  up  security  of  the  Defense 
Department's  networks. 

The  DIAP  provides  a  common  management  framework  and  central 
oversight  to  protect  the  Defense  Information  Infrastructure. 

fhe  NSA  is  a  Department  of  Defense  agency  that  conducts  highly 
specialized  intelligence . 


year  95;  $410  million  in  FY  96  and  nearly  $400  million 
per  year  for  several  years  thereafter  —  to  enhance  an 
over-extended  DISSP. 

The  memo  refers  to  repeated  penetrations  over  the 
previous  few  months  by  “unknown  attackers”  who  had 
“gained  entry  into  computers  at  numerous  military 
installations  where  they  took  control  of  computers, 
installed  back  doors  and  Trojan  horses  to  ensure  re¬ 
entry  into  these  computers,  read  and  steal  data  files  . . .” 

The  memo  continued:  “The  intruders  had  the  capa¬ 
bility  to  destroy  these  systems,  inject  false  data  into 
databases,  compromise  the  research  and  development 
of  weapon  systems  and  use  these  systems  to  steal  large 
sums  of  money.” 

In  the  end,  the  DISSP  was  to  receive  $705  million 
over  a  five-year  period,  which  fell  far  short  of  the  $400 
million  per  year  for  which  the  group  had  hoped. 

Slippery  spending 


Ten  years  ago,  the  U.S.  Department  of  Defense 
embarked  on  an  extensive  project  to  upthe  seeur  ■ 
ty  of  its  growing  cadre  of  networks.  But  because 
of  political  infighting  and  budget  turf  battles,  the 
project  failed  before  completing  most  of  its  goals. 
Now  a  new  administration  is  trying  to  secure  the 
Defense  Department's  networks,  but  will  the  ad¬ 
ministration  be  able  to  learn  from  past  mistakes? 


However,  only  $2  million  of  that  amount  ended 
up  going  to  the  DISSP,  according  to  a  former  DISSP 
official. 

“All  that  budget  increase  went  into  DISA  infrastruc¬ 
ture  —  not  the  DISSP,  “  says  another  source  close  to 
the  budget  at  the  time.  He  says  Congress  thought  the 
money  was  going  to  shore  up  defensewide  security, 
while  that  simply  wasn’t  true. 

To  hear  Ayers  tell  it,  the  DISSP  became  a  cash  cow 
for  other  DISA  programs  during  tight  budget  times. 

“The  money  and  resources  set  aside  to  run  this  pro¬ 
gram  did  not  come  from  DISA.The  Army,  Navy, Air 
Force  and  other  departments  scraped  it  together.  Then 
DISA  took  it,“  he  says. 

In  an  after-action  report  that  was  reviewed  and 
approved  by  several  DISA  and  NSA  officials,  Ayers  con¬ 
tends  that  in  all,  155  DISSP  billets  (funded  job  requisi¬ 
tions,  most  of  which  were  for  security  managers)  and 
more  than  $100  million  of  DISSP  money  was  diverted 
to  other  DISA  programs  during  FY  95. 

The  memo  also  claims  that  other  DISSP  operational 
programs  went  unrealized  because  of  this  shortfall.  For 
example,  no  government  program  management  office 
was  built  to  manage  security  software  acquisition  and 
development.  But  the  report  was  quietly  filed  away 
somewhere  in  the  DISA,  and  nothing  was  ever  done  to 
remedy  the  problem. 

Network  World  obtained  documentation  verifying 
that  the  DISSP  got  the  shaft.  In  a  carefully  worded 
December  1994  funding  distribution  signed  by 
Emmett  Paige  (then  secretary  of  defense  for  C3I)  that 
spelled  out  how  the  budget  was  to  be  allocated  over 
the  coming  years,  FY  96  INFOSEC  distribution  was 
$105  million,  and  slightly  higher  for  subsequent  years. 

However,  a  close  look  at  the  report  reveals  that  only 
$2  million  was  actually  earmarked  for  the  DISSP  The 
remaining  $103  million  was  to  be  poured  into  building 
up  the  DISA’s  network  infrastructure  and  enhancing 
security  of  the  DISA  backbone,  while  the  money 
should  have  been  used  to  secure  the  military  branch¬ 
es’  individual  networks. 

In  an  e-mail  response  to  a  reporter’s  queries,  Paige 
says  he’s  forgotten  all  he  ever  knew  about  the  DISSP, 
adding, “You  could  call  it  a  memory  dump.” 

As  the  DISSP  limped  along  with  little  budget  to  exe¬ 
cute  its  mission,  existing  staff  began  losing  heart. Then 
the  final  nail  was  hammered  into  DISSP’s  coffin:A  reor¬ 
ganization  that  split  up  DISSP  personnel  and  moved 
them  into  various  DISA  jobs. 

“We  could  no  longer  have  any  operational  synergy 
between  the  groups,”  says  one  DISSP  team  member. “A 
lot  of  us  left  in  disgust,  and  the  DISSP  floundered.” 

Ayers  stuck  around  to  manage  fragmented  security 
divisions  within  the  Defense  Department  until  his 
retirement. 

Network 


When  the  DISSP  fell  apart,  Edmonds  was  under 
presidential  order  to  reorganize  the  DISA  so  it  could 
put  more  resources  into  building  its  infrastructure.  He 
and  another  DISA  official  contend  they  needed  to 
move  DISSP  staffers  to  DISA’s  central  offices  to  better 
manage  overall  security  efforts.  Edmonds  also  says  that 
the  20  or  so  security  managers  who  left  the  DISSP  did 
so  for  higher  paying  jobs. 

Here  and  now 

Regardless  of  who’s  to  blame,  the  networks  the 
DISSP  was  supposed  to  protect  aren’t  all  that  secure 
today,  according  to  sources. A  current  DISA  official  says 
many  network  configurations  among  Defense  Depart¬ 
ment  agencies  and  bases  are  still  “stove  pipes,”  each 
with  its  own  internetworking  and  nonstandardized 
security  policies  and  tools.  Now  the  problem  is  the 
DIAP’s  to  tackle. 

That’s  not  to  say  the  armed  services  and  Defense 
Department  agencies  that  DISSP  was  supposed  to  aid 
haven’t  made  progress  on  their  own. 

Says  Cisco’s  Zeise, “Different  parts  of  the  Defense 
Department  will  be  able  to  detect  security  incidents  at 
different  rates  over  differing  periods  of  time.  But  all  of 
them  are  coming  up  to  speed.” 

In  addition,  the  DIAP  is  no  longer  run  by  the  DISA. 
Now  the  DIAP  reports  to  Defense  Secretary  William 
Cohen,  while  Deputy  Secretary  John  Hamre  is  in 
charge  of  operational  oversight. This  configuration 
gives  the  DIAP  more  autonomy  from  the  DISA’s  poli- 
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s.  DIAP  Director  Schaefer  says, 
ichaefer’s  team  is  now  implementing 
urity  enhancements  throughout  the 
various  networks  that  communicate 
over  the  DISA  backbone.  Much  of  this 
organizational  approach  was  outlined  in 
DISSP  documentation. 

“Maybe  as  a  program  the  DISSP 


didn’t  survive;  but  many  parts  of  it 
did,”  says  Ed  Hart,  formerly  director 
of  the  NSA’s  INFOSEC  program, 
which  was  part  of  the  DISSP  in  the 
mid-90s.“And  the  NS  A  has  certainly 
continued  to  spend  money  on  security 
enhancements.” 

The  DIAP  team  has  begun  new  pene¬ 


tration  tests  and  assessments  on 
defense  networks  to  help  plug  leaks 
and  show  clients  where  to  standardize 
on  firewalls,  intrusion  detection  and 
other  security  technologies.  And  the 
DIAP  is  also  examining  critical  infra¬ 
structure  vulnerabilities  where 
Defense  Department  networks  rely  on 
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When  a  manufactured  housing  retailer  with 
hundreds  of  home  centers  nationwide  needed 
a  powerful  solution  to  provide  better  castor  -r 
service  and  enable  JIT  manufacturing,  the  chal¬ 
lenges  were  many.  The  company’s  geographically 
dispersed  staff  of  computer  novices  needed  ready 
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customer  leads  and  provide  messaging  —  all  with 
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can  ship  within  24  hours  in  the  unlikely  event  of 
a  hardware  failure. 
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private  industry,  such 
as  data  services  and 
electricity. 

“Good  opera- 
tional  security 
is  the  linchpin  to 
securing  such  a 
complex 
enterprise,” 
says  Cisco’s 
Ziese  in  praise  of  today’s  DIAP  efforts. 
“If  we  have  some  level  of  standard¬ 
ized  security  configuration,  it  helps 
make  it  a  lot  easier  to  recover  after 
an  attack.” 

But  with  a  budget  of  $147  million 
for  FY  2000  and  $167  million  for  FY 
2001,  the  DIAP  is  getting  only  one- 
fourth  of  what  former  NSA  Director  Jay 
McConnell  said  was  needed  to  main¬ 
tain  “minimum  security”  in  a  June  1994 
request  for  additional  funding. 

What’s  more,  would-be  threats  from 
other  countries  have  become  more 
sophisticated. 

If  the  DISSP  had  flourished, 

Schaefer  says,  “We’d  be  light  years 
ahead  today  in  terms  of  networked 
information  security.” 

A  former  member  of  the  DISSP  team 
adds:  “Now  Cohen  and  Hamre  are 
behind  the  program,  but  look  at  how 
many  years  it’s  taken  and  how  many 
years  we’ve  lost.The  unclassified  sys¬ 
tems  are  used  for  logistics,  parts  pro¬ 
curement,  human  resources.  From 
those  networks,  you  can  garner  a  hell 
of  a  lot  of  information,  including  troop 
movements  and  buildup.” 

Even  though  several  years  have 
gone  by,  the  DISSP’s  plight  still  riles 
some  of  the  former  players,  Hart 
surmises. 

“But  this  is  not  unlike  any  other  tech¬ 
nical  revolution.Those  most  in  the 
know  technically  tend  to  be  well  out 
front,”  he  says.  Unfortunately,  those  in 
front  are  the  first  to  get  shot. 

Still,  Hart  contends  that  the  Defense 
Department  “has  the  best  thing  going 
in  terms  of  information  security.”  If 
the  new  DIAP  administration  can  use 
the  DISSP’s  groundwork  and  sidestep 
its  pitfalls, “maybe  the  sweat,  blood 
and  tears  that  went  into  building  the 
program  was  worth  it,”  he  says. 

Radcliff  is  a  freelance  writer  in 
northern  California  who  specializes  in 
reporting  on  high-tech  crimes.  She  can 
be  reached  at  DeRad@aol.com. 


More 


Online 


•  Check  out  audit  reports  that  detail  the 
need  to  fortify  security  of  the  U.S. 
Department  of  Defense  networks. 

•  Learn  more  about  the  government's 
information  security 
operations. 
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Micron’s  NetFrame 
5200  is  the  vanilla 
ice  cream  of  general- 
purpose  midrange 
workgroup  servers. 
Its  case,  motherboard,  processors 
and  management  software  are  from 
Intel,  and  no  hardware  subsystem 
components  were  designed  by 
Micron.  It  scored  an  unspectacular 
7.7,  but  this  moderate  score  is  tem¬ 
pered  by  its  relatively  inexpensive 
price  of  $13,145. 

This  server  is  a  fair  performer, 
scoring  8.3  out  of  10  in  overall  per¬ 
formance.  The  NetFrame  5200 
scored  a  10  for  the  CPU  and  net¬ 
work  tests,  most  likely  due  to  its 
550-MHz  Pentium  III  processors. 
However,  a  5  in  the  file  test,  likely 
due  to  a  poorly  performing  disk 
controller,  brought  down  its  overall 
performance  score.  To  derive  the 
performance  score,  we  weighted  the 
file,  SQL  and  network  tests  at  35%, 
35%  and  30%,  respectively. 

The  server  case’s  lockable  front 
bezel  houses  the  diskette,  CD-ROM 
and  hard  drive  cage,  and  the  power 
switch.  You  have  to  remove  three 
screws  to  open  the  side  of  the  case 
to  access  the  roomy  interior.  Ser¬ 
viceability  in  this  server  leaves 
much  to  be  desired;  you  need  a 
screwdriver  to  remove  almost 


Micron's  workgroup  server  does  well 
in  CPU  and  network  benchmarks,  but  its 
other  features  fail  to  stand  out. 


BY  JOHN  BASS,  NETWORK  WORLD  TEST  ALLIANCE 


everything,  and  components  are 
only  moderately  accessible.  The 
drive  cage  has  the  capacity  for  six 
hot-pluggable  1-inch  hard  drives. 
The  server  can  be  used  in  a  stand¬ 
alone  or  rack  configuration. 


The  server  supports  as  many  as 
three  power  supplies.  One  power 
supply  is  enough  to  run  the  server. 
A  configuration  with  two  power 
supplies  provides  load  balancing 
and  redundancy,  but  in  that  config¬ 
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ScoreCard 


Performance  40% 

8.3 

Features  and  flexibility  30% 

8 

Manageability  20% 

7 

Serviceability  10% 

6 

Total 


7.7 


Individual  category  scores  are  based  on  a  scale 
of  1  to  10.  Percentages  are  the  weight  given 
each  category  in  determining  the  total  score. 


uration,  the  power  supplies  are  not 
hot-swappable.  Three  power  sup¬ 
plies  gives  the  server  hot-pluggable 
capability,  power  load  balancing 
and  2+1  redundancy. 

This  NetFrame  5200  came  with 
two  550-MHz  Pentium  III  proces¬ 
sors,  512M  bytes  of  RAM,  five 
9.1G-byte  hard  drives  and  two 
Fast  Ethernet  network  interface 
cards  (NIC).  The  processors  are 
housed  in  a  screwed-in  retention 
system.  The  drive  cage  is  connected 
to  an  onboard  Adaptec  7896  Ultra2 
SCSI  controller.  An  UltraNarrow  SCSI 
controller  is  provided  on  the  moth¬ 
erboard  for  slower  peripherals.  The 
motherboard  supports  six  PCI  slots 
—  three  are  66MHz  and  three  are 
33MHz  —  and  six  Single  Connection 
Attach  hard  drive  slots. 

NT  and  NetWare  were  installed 


Features  and  configurations 


NetFrame  5200 

Micron 

(800)  209-9686 

www.micronpc.com/commercial/servers/departmental/nf5200/index.html 

$13,145 


Processor  type 

550-MHz  Pentium  III 

Number  of  processors 

2 

Number  of  processors  supported 

2 

Memory  configuration 

51 2M  bytes 

Number  and  type  of  RAM  slots 

4  PC-100  SDRAM 

Expansion  slots  present 

(5)  PCI,  (1)  PCI/ISA* 

Expansion  slots  available 

(5)  PCI 

More 


Online 


•  See  how  we  test  servers. 

•  See  how  Micron's  NetFrame  5200  stacks 
up  against  other  servers  we've  reviewed. 
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Disk  controller 


Onboard  Adaptec  7896  Ultra2  SCSI  controller,  7860  UltraNarrow  SCSI  controller 


Hard  drive  description 

IBM  9.1  G-byte  Ultra2  SCSI  10K  rpm 

Number  and  description  of  hard  drive  bays 

(6)  hot-pluggable  SCA  1-inch  slots 

Network  interface 

Onboard  Intel  82558  Pro  100+  Fast  Ethernet  interface,  PCI  Intel  82558  Pro  100+  Fast  Ethernet  interface 

CD-ROM 

NEC  40X  max  IDE 

Availability  features 

ECC  memory,  hot-pluggable  drives 

Manageability  features 

Intel  Emergency  Management  Port,  Intel  LANDesk  Server  Manager  6,  integration  software  for  Tivoli,  Unicenter  TNG, 

HP  OpenView 

Security  features 

Front  panel  keylock,  intrusion-detection  switch 

Bundled  software 

Intel  LANDesk  Server  Manager  6 

Warranty  5  years  for  processors  and  RAM,  3  years  for  all  parts,  1  year  on-site  next  business  day 

•(All  slots  are  32-bit;  3  are  66MHz  PCI  slots;  the  remainder  are  33  MHz.) 
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<  ,  a  RAID  0  stripe  set  configured  by 
h  operating  system.  The  drive 
i  ckplane  was  connected  directly  to 
he  Ultra2  SCSI  controller  port  on  the 
motherboard.  The  onboard  Fast 
Ethernet  NIC  and  the  PCI  NIC  were 


configured  for  full-duplex  100M 
bit/sec  operation. 

Micron  bundles  Intel  LANDesk 
Server  Manager  6  with  NetFrame  5200 
for  management. 

Even  though  the  server  seems 


average  in  design,  Micron  offers  an 
aggressive  service  package,  providing 
installation  and  orientation,  data 
migration  services,  data  recovery  ser¬ 
vices  and  enterprise  service  plans  for 
Micron  and  third-party  equipment. 


Try  it  today  at: 


www.networkworld.com/infoxpress 


Netscape:  InfoHpress  -  Network  World 


Go  To:  |h<tp://wv.n»<workvoi,ld.oom/<nfoxpr«»~ 
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Server  testing 
is  performed  at 
North  Carolina 
State  University’s 
Centennial 
Networking  Labs 
(CNL)  in  Raleigh. 

CNL  tests  network  equipment 
and  network-attached  devices 
for  interoperability  and  perfor¬ 
mance.  Bass,  a  senior  technical 
staff  member  at  CNL,  designs 
and  leads  the  execution  of  the 
test  suites.  He  can  be  reached  at 
john_bass@ncsu.  edu. 

Bass  is  also  a  member  of  the 
Network  World  Test  Alliance.  For 
more  Test  Alliance  information, 
including  what  it  takes  to 
become  a  member,  go  to  www. 
nufusion.  com/alliance. 


Benchmark  results 

We  used  Bluecurve's  Dynameasure  File 
Professional  2.0  and  Dynameasure  SQL 
Professional  2.0  to  measure  I/O  and  CPU¬ 
intensive  operations,  and  Ganymede 
Chariot  to  stress  the  network  interface. 


File  server  tests  (Kbyte/sec) 


1  5  10  15  20 

Simulated  users 


Network  tests  (M  bit/sec) 
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Voice-Data  Convergence  •  Quality  of  Service  •  Gigabit  Ethernet 
Policy-Based  Management  •  Layer  3  and  Layer  4  Switching 

It's  time  to  stop  th 
ing  inside  your 

Learn  what's  right  for  your  network. 
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State  of  the  LAN:  Creating  a  Master 
Plan  for  Your  Next-Generation  Network 


As  the  industry  converges  on  Ethernet-at-some-speed  as  the  universal  choice  for  Local 
Area  Networks,  there  is  an  overabundance  of  often  overlapping  options  for  designing  a 
next-generation  LAN.  Unless  you  can  comprehend  and  evaluate  all  of  them,  you  may 
choose  to  delay  implementation  which  will  only  create  more  work  for  you  down  the  road. 
If  you’re  involved  in  network  design,  deployment,  and  operation  of  corporate,  SP  or  ISP 
networks,  you  need  to  attend  State  of  the  LAN:  Creating  a  Master  Plan  for  Your  Next- 
Generation  Network.  It  is  the  best  opportunity  to  have  your  most  critical  LAN 
management  questions  answered  and  stop  the  buzzing  in  your  head. 

Six  reasons  not  to  miss  this  FREE  seminar: 

1.  Find  out  how  policy-based  networking  can  radically  change  the  management  of  your  net 

2.  Discover  how  Layer  4  switching  can  turbo  charge  your  IP  convergence  strategy 

3.  Learn  about  the  latest  developments  in  QoS  initiatives  and  the  trade-offs  between 
different  approaches 

4.  Examine  opportunities  for  voice-data  integration  and  the  convergence  of  PBX  and  the  LAN 

5.  Understand  the  most  cost  effective  methods  for  integrating  legacy  LAN  topologies 
and  communications  protocols 

6.  Learn  how  Gigabit  Ethernet  and  ATM  complement  each  other  in  the  enterprise 


Moderators 

John  Gallant,  Editorial  Director,  Network  World  and  Kevin  Tolly,  President,  The  Tolly  Group 


Along  with  the  leading  networking  solutions  providers  in  this 
unique  interactive  event,  John  and  Kevin  will  examine  the 
LAN  challenges  you  face  and  provide  you  with  a  focused 
opportunity  to  learn  how  to  solve  them. 
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Strategies 


Penn  puts  out  an  SOS 


Insourcing  program  challenges  staff  while 
providing  valuable  service  to  campus  users. 


BY  PAUL  DESMOND 

When  a  key  member  of  your  support  staff 

announces  he  got  a  better  offer  and  is  leav¬ 
ing  your  company,  it  likely  begins  a  roller¬ 
coaster  ride  that  has  you  scrambling  for 
interim  support  help,  pouring  over  dozens 
of  resumes  in  search  of  a  worthy  replace¬ 
ment  and  conducting  seemingly  endless  interviews. 

The  University  of  Pennsylvania  in  Philadelphia  has 
found  a  better  way.  Since  1994,  the  school  has  been 
operating  an  “insourcing”  program  whereby  a  central 
IT  organization  provides  individual  departments  with 
full-  or  part-time  support  personnel,  recruiting  help 
and  project  management  planning  —  all  for  a  fraction 
of  the  cost  of  the  same  services  on  the  open  market. 

The  Support-on-Site  (SOS)  program  is  part  of  the 
university’s  Information  Systems  and  Computing 
(ISC)  organization,  which  provides  the  IT  infrastruc¬ 
ture  for  the  school’s  45,000  students,  faculty  and  staff. 

SOS  users  like  the  arrangement  because  they  can 
take  advantage  of  workers  who  know  where  to  turn 
to  get  answers  and  resources.  SOS  staffers  like  the 
program  for  many  of  the  same  reasons,  plus  some 
others  such  as  opportunities  for  training  and 
advancement  they  wouldn’t  likely  get  working  full¬ 
time  within  a  single  university  school  or  department. 

“When  we  started  doing  this,  we  had  seen  folks 
leaving  for  external  companies,”  says  Don  Montabana, 
founder  and  senior  IT  director  of  SOS.  “My  notion  was 
to  insource  at  the  university  to  make  sure  that  the 
intellectual  capital  that  was  on  campus  stayed  here.” 

SOS  comprises  28  people  and  offers  four  distinct 
services: 

•  Distributed  Staffing  Service.  Full-time  support 
professionals  are  placed  in  university  administrative 
offices,  schools  and  other  units.  Workers  are  part  of 
the  central  SOS  group,  giving  them  access  to  all  the 
resources  of  their  SOS  colleagues  and  the  larger  ISC 
organization. They  also  report  to  a  local  manager  in 
the  department  where  they  work  and  act  as  an  advo¬ 
cate  for  that  department’s  computing  needs. 

The  client  pays  the  employee’s  salary,  benefits  and 


More  Online 


*  Details  about  Penn's  SOS  program. 
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a  1 5%  management  fee  — 
capped  at  $7,500  —  that  cov¬ 
ers  training,  recruiting,  hiring 
and  mentoring. 

•  Dispatch  Service.  This 
short-term  computing  support 
service  helps  tide  departments 
over  while  they  search  for  per¬ 
manent  replacements,  and 
offers  help  with  special  pro¬ 
jects,  consulting  and  trou¬ 
bleshooting.  The  service  costs 
a  flat  $75  per  hour,  although 
bulk  discounts  are  available. 

Some  local  services  may 
appear  to  be  less  expensive, 
but  Montabana  says  SOS 
staffers  know  the  school’s 
computing  environment  better 
than  anyone  else. 

“If  it  takes  us  an  hour  to 
solve  a  problem  and  it  takes  a 
local  provider  two,  you  lost  on 
that  one,”  he  says. 

•  IT  Recruiting  Service.  Being  Penn  employees, 
Montabana  says  his  group  is  uniquely  qualified  to 
find  suitable  candidates.  “We  try  to  do  not  only  a 
technical  fit,  but  also  a  personality  fit,”  he  says. 

The  cost  for  the  recruiting  service  is  15%  of  the 
new  hire’s  salary.  “Most  external  recruiters  charge  20% 
to  30%, ”  Montabana  says.  The  difference  is  he’s  not  try¬ 
ing  to  make  a  profit.  “I  just  have  to  break  even.” 

•  Technology  Planning  and  Data  Management.  This 
latest  SOS  service  includes  helping  departments  with 
computing  needs  analysis  and  feasibility  studies  as  well 
as  project  management.  “The  notion  is  to  help  units 
make  informed  business  decisions,”  Montabana  says. 

A  hit  from  both  sides 

SOS  services  users  cite  a  number  of  program  bene¬ 
fits,  most  relating  to  the  technical  support  that  being 
part  of  the  larger  ISC  group  provides.  “It  helps  sup¬ 
port  people  get  oriented  faster  to  how  things  work  at 
Penn,”  says  John  Irwin,  director  of  computing  services 
at  Penn’s  Graduate  School  of  Education.  Irwin  has 
two  full-time  SOS  people  working  in  his  department, 
one  a  system  administrator,  the  other  a  help  desk 
coordinator. 

Having  someone  to  ease  the  hiring  burden  doesn’t 
bother  Irwin  either.  One  of  his  SOS  staffers  left  the 
organization  last  month,  but  Irwin  was  able  to  turn  to 
the  SOS  relationship  manager,  Cathy  DiBonaventura, 


for  help  filling  the  vacancy.  DiBonaventura  generated  a 
list  of  qualified  candidates,  then  reviewed  the  list  with 
Irwin. They  are  interviewing  job  candidates. 

Irwin  likes  having  a  relationship  manager  to  help 
supervise  his  staff  and  map  out  individualized  train¬ 
ing  programs.  And  naturally,  the  IT  professionals  who 
make  up  SOS  benefit  as  well. 

SOS  works  to  forge  a  sense  of  togetherness  among 
the  staff,  for  instance  by  holding  weekly  lunches. 

“We  stress  networking  with  these  folks  so  they  get 
to  know  each  other  as  peers,”  Montabana  says.  “If  you 
like  each  other,  it  really  helps." 

Eric  Snyder,  a  senior  support  specialist  with  SOS 
who  works  for  ISC’s  network  group,  says  the  lun¬ 
cheons  usually  spur  a  technical  discussion.  As  a 
result,  staffers  learn  about  everything  from  problems 
others  are  having  to  new  bugs  in  operating  systems. 

Montabana  thinks  a  program  similar  to  SOS  could 
work  in  a  corporation  as  well,  providing  it  was  run 
by  personnel  that  had  a  thorough  understanding  of 
the  company’s  various  business  units. 

“I  would  love  to  try  and  do  this  in  a  corporate 
environment,”  Montabana  says.  “It’d  be  a  little 
tougher,  but  it  could  be  done.” 

A  former  Network  World  editor,  Desmond  is  vice 
president  of  King  Content,  a  custom  publishing  and 
editorial  services  company  in  Walpole,  Mass.  He  can 
be  reached  at  paul_desmond@king-content.com. 
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:AT&T  Solutions 


Future-minded  organizations  around  t! >.•  wi-ild  recognize  the 
imperatives  of  what  we  term  the  >  >n<  1  i  «y  a,  knowledge  the 

need  to  embrace  networking  technologioi  if  th  y  ?,re  to  be  leaders 
in  their  industries. 

AT&T  Solutions  is  increasingly  seen  as  the  preeminent  provider  of 
custom  network  solutions.  From  strategic  b  viiness  planning 
through  the  design  and  deployment  of  new  systems  and  business 
processes,  we  enable  our  clients  to  move  from  outdated  business 
models  to  cutting-edge  practices. 

Our  incredible  growth  has  given  rise  to  outstanding  opportunities 
in  the  following  areas: 

Systems  Engineer 

Responsible  for  the  design,  engineering,  and  implementation  of  a 
customer  data  network.  Requires  in-depth  expertise  in  one  or  more 
specific  data  networking  products  or  services  such  as  Multiprotocol 
Networking,  Internet/VPN  Solutions,  or  Carrier  Services 
Engineering.  The  area  of  specialization  must  include  direct  hands- 
on  implementation  experience  and  industry  or  vendor  certification. 
Specific  areas  of  technical  expertise  include  Router  Networking 
CCisco/Bay  Networks),  Networking  Protocols  (IP/OSPF,  SNA),  and 
Networking  Services  [ATM,  Frame  Relay,  ISDN  PR/BRI). 


Networking  the  New  ^-conomy 

www.  attsolutions.  com 


Integration  Engineer 

Responsible  for  the  specification  and  documentation  of  all  physical 
and  logical  details  for  a  network  location.  Requires  in-depth 
knowledge  of  the  physical  attributes  of  networking  hardware  and 
familiarity  with  networking  services  and  networking  equipment 

_  [multiplexers,  CSU/DSUs,  modems)  for  interfacing  to  Network 

Services.  Also  requires  knowledge  of  data  center  design,  equipment 
testing  and  installation  practices;  attention  to  detail;  and  excellent  PC  skills;  3+  years  of  industry  experience  and  an 
Associate's  degree  in  a  technical  field  or  equivalent  industry  training  preferred. 

Systems  Architect 

Individual  serves  as  the  technical  team  leader  for  the  design,  engineering  and  implementation  of  Enterprises  Data 
Networks,  and  has  overall  technical  responsibility  for  delivery  of  the  solution  from  project  inception  through  the 
transition  of  life-cycle.  Candidates  must  have  a  broad  understanding  of  networking  technologies  and  customer 
network  applications,  and  in-depth  expertise  in  one  or  more  specific  data  networking  products  or  services  such  as 
Multiprotocol  Networking,  Internet/VPN  Solutions,  or  Carrier  Services  Engineering.  The  area  of  specialization  must 
include  direct  hands-on  implementation  experience  and  possible  industry  or  vendor  certification.  Good  presentation 
skills  are  required:  8-  years  of  industry  experience;  and  a  BS/MS  degree  in  Computer  Science  or  Engineering  is 
preferred. 

Network  Engineers 

Apply  your  data  networking  skills  by  designing,  testing,  and  documenting  router-based  solutions.  Develop  LAN 
nterconnect  solutions/offers  using  Cisco  or  Nortel  [Bay  Networks)  router,  LAN  operating  systems  and  protocols, 
AT&T  WAN  and/or  IP  services,  and  modems/DS Us/multiplexers.  Must  understand  new  software  and  hardware 
features  and/or  releases  from  router  vendors  developing  solutions.  Candidates  will  obtain  customer  requirements, 
plan  and  build  lab  test  environments,  perform  tests,  document  solutions,  and  train  technical  team  members  and 
work  center  support  personnel. 

Tier  III  Technical  Engineers 

Requires  3-5  years  WAN  maintenance  &  implementation  experience;  CSU/DSU  familiarity;  a  BS  degree;  and  extensive 
experience  with  I0S  configuration  &  upgrade;  Cisco/Cabletron/Bay  Networks,  and  IP  routing  on  Cisco  products  [in 
a  X.25  switched  network). 

Tier  II  Technical  Engineers 

Requires  2+  years  LAN/WAN  experience;  a  BS  degree;  1  year  experience  I P  routing  on  Cisco  products;  and  experience 
with  I0S  configuration  &  upgrade  and  Cisco/Cabletron/Bay  Networks.  A  UNIX  background  is  a  plus.  Knowledge  of 
HP  Openview  and  Network  Node  Manger  is  beneficial. 

Tier  ll/lll  Voice  Engineers 

Requires  the  ability  to  manage  multiple  vendors,  maintenance  contracts,  billing  and  escalations  in  a  reactive 
environment  Strong  organizational  and  escalation  skills  are  required  to  coordinate  with  AT&T  Network  Management 
Centers  in  support  of  AT&T  client  global  transport  network  (VTNS,  800  service).  Knowledge  of  network  services 
must  be  complimented  with  an  in-depth  understanding  of  PBX  Move,  Add  and  Change  [MAC),  PBX  features, 
manual  ring  down  circuits,  T1 ,  private  lines  over  IDNX,  &  CSU/DSUs.  Understanding  of  Lucent  Technologies  [Definity) 
router  [3Com,  Cabletron,  Optivity,  Nortel,  Octel)  an  added  plus. 

Systems  Analyst 

Position  requires  an  Analyst  with  systems  administration  skills.  Responsibilities  will  include  administration  &  day- 
to-day  duties  involving; 

Software 

•  UNIX  system  administration  -  UNIX  -  NT  &  HP-UX  software  installation 

•  UNIX  shell  -  HP  Network  Node  Manager  4.1  -  HP  IT/Operations  -  Microsoft  Windows 

•  X  Windows  -  Application  Administration 

Hardware 

•  HP  9000/7xx  workstations  -  Sun  Sparc  -  Desktop  Workstations  (PCs  running 
Windows  NT)  -  HP  9000/8xx  Servers 

Others 

Performance  management  -  Problem-solving  and  decision-making  -  Basic 
LAN/WAN  networking  concepts  -  Participates  in  weekly  rotation  of  24x7  on-call  pager 

Voice  Associate 

Candidate  will  administer/troubleshoot  hardware/software  issues  for  PBX's,  voice  mail  systems,  compute!  telephony 
integration,  and  voice  response  issues.  Responsibilities  also  include  managing  vendors  such  as  Lucent  Technologies. 
Moves.  Adds,  Changes  provisioning  requests.  Candidate  should  have  experience  with  T-1/T3  transpoi t  and  ISDN 

Network  Engineer 

Candidate  will  provide  high  level  support  of  networks  on  Cisco  and  Bay  routers  as  well  as  advanced 
troubleshooting  on  frame  relay,  HP  Openview,  IPX,  SNA,  ISDN.  Candidate  must  have  project  managomoiU, 
experience  and  be  able  to  interface  with  client. 

AT&T  careen,  the  perfect  solution. 

/  •.it  our  website  at  http://www.attsolutions.com  referencing  Job  code 

AT&T  Solutions  ib  an  f  qual  Opportunity  I  mployu  m 

-  - - 
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FOUNDRY 

NETWORKS 

Layer  2/3  and  Layer  4 
Product  Marketing  Managers 

While  the  marketing  departments  of  those 
other  networking  vendors  are  busy  spinning 
stories  about  how  they’ll  be  able  to  give  you 
what  your  looking  for  sometime  in  the 
future.  Foundry  Networks  is  telling  it  like  it 
is  now,  because  only  Foundry  Networks 
delivers  64-ports  of  non-blocked,  full  line 
rate,  wire-speed  switched  and  routed  Gigabit 
Ethernet.  And  Foundry  Networks  is  the  only 
company  that  offers  a  full  compliment  of 
Layer  2/3  and  Layer  4-7  switching,  routing, 
and  server  load  balancing  products  today! 

We  are  looking  for  a  few,  exceptional  candi¬ 
dates  to  join  our  team  as  Layer  2/3  and 
Layer  4  Product  Marketing  Managers. 
If  you’re  ready  to  connect  with  a  hot  and 
exciting  company  on  the  leading  edge  of 
technology  who  sells  architecture  and  not 
markitecture,  please  see  our  website  at 
www.foundrvnetworks.com/marketing.html 

for  a  complete  job  description,  or  submit  your 
resume  directly  to  jobs@foundrvnetworks.com 
and  reference  this  job  ad  in  your  cover  letter. 
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SYSTEMS  ANALYST  to  perform 
structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  IBM  mainframe 
platforms  utilizing  COBOL  11, 
JCL,  Assembler,  C1CS,  Microfocus 
Workbench,  DB2,  VSAM, 
INTERTEST.  XPEDITER  and 
MVS/HSA  Require:  Bachelors  (or 
equivalent)  in  Computer  Science, 
Statistics,  or  related  technical  field 
and  two  years  experience  in  the 
job  offered  or  as  a  Programmer 
Analyst/Software  Consultant  40% 
travel  to  customer  sues  within  the 
United  States  required.  Salary: 
$50,000  per  year,  8  am  to  5  pm. 
M-F  Apply  with  resume  to: 
r  resident,  Business  Oriented 
Software  Solutions,  Inc  .  3040 
•  Icomb  Bridge  Road.  Suite  D-2, 
N  rcross.GA  30071.  (Ref:  SK99). 


Networld+lnterop  ‘99 


Network  World  Career  Fairs 


Atlanta 

September  14,  15,  16 

For  More  Information  Call:  800-622-1108  Ext.  7510 
Or  Go  To  www.nwfusion.com 


SYSTEMS  ANALYST  to 
design,  develop  and  analyze 
business  systems  and  appli¬ 
cations  in  multi-system  envi¬ 
ronment  (IBM,  AS/400, 
UNIX,  Windows,  TCP/IP)  with 
Java,  Microsoft  Visual  C++, 
Active  X  and  Shell  program¬ 
ming;  develop,  test  and 
implement  performance  mon¬ 
itoring  models  such  as 
GUI,  NEIM,  and  TLI  layers 
using  Visual  J++,  JDK,  MS- 
SQL  Server  on  Windows 
95/NT.  Require:  B.S.  (or 
equivalent)  in  Computer 
Science/Computer 
Engineering  and  two  years 
experience  in  the  job  offered 
or  as  Software  Engineer. 
40%  travel  required  to  cus¬ 
tomer  sites  within  the  United 
States.  Salary:  $50,000  per 
year,  8  am  to  5  pm.  M-F.  Mail 
resume  to  Maha  Mahadevan, 
President,  Business  Oriented 
Software  Solutions.  Inc., 
3040  Holcomb  Bridge  Road. 
Suite  D-2,  Norcross,  GA 
30071  (Ref:  SD99). 


SYSTEMS  ANALYST  to  pro 
vide  on-site  consultancy  ii 
object  oriented  system  analysi 
and  design  using  Java,  C,  C+ 
and  RDBMS  Oracle  an 
Sybase  with  CORBA,  RMI  an 
JavaBeans;  write  multi-threadi 
ed  and  distributed  application 
using  TCP/IP  suite  of  protc 
cols,  HTTP  in  UNIX  an 
Windows  environment;  dcvei' 
op  complete  software  life  cyd 
and  use  data  modeling,  objei 
modeling,  CGI  and  architect  r  ^ 
tier  applications.  Requirt 
Bachelors  (or  equivalent)  in 
Computer  Science/Systei 
Management/Busincs 
Administration  and  two  yeai  i 
experience  in  the  job  offeree 
40%  travel  to  customer  site 
within  the  United  State i 
required.  Salary:  $50,00 
per  year,  8  am  to  5  pm,  M-l 
Apply  with  resume  tt 
President,  Business  Oricnte 
Software  Solutions,  Inc.,  304 
Holcomb  Bridge  Road,  Suit 
D-2,  Norcross,  GA  300711 
(Ref:  SV99). ' 
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7 


m 


re  Network  Bit 


Reboot  your  Network  Equipment  via  Telnet,  Dial-Up  and  Local  Console 


Network  equipment  sometimes  "locks-up"  requiring  a 
service  call  just  to  flip  the  power  switch  to  perform  a 
simple  reboot.  The  NPS  Network  Power  Switch  gives 
network  administrators  the  ability  to  perform  this 
function  from  anywhere  on  the  LAN/ WAN,  or  if  the 
network  is  down,  to  simply  dial-in  from  a  standard 
external  modem  for  out-of-band  power  control. 

✓  TCP/IP  Security 

✓  Individual  Plug  Passwords 

✓  Dual  15  Amp  Power  Inputs 

✓  Eight  (8)  Individual  Outlets 

✓  Modem  and  Console  Ports 

✓  Co-Location  Features 

✓  115-VAC  and  230-VAC  Models 

✓  Modem  and  Telnet  Auto  Reset 


Individually 
Programmable 
Outlet  Plugs  (8) 


lOBase-T  Ethernet 
Interface 


1 9”  Rack  Brackets 
Allow  Front,  Back,  or 
Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band 
Management 


□  western 
D  telematic  inc. 


Local  RS232 
Console  Port 


(800)  854-7226  •  www.wti.com 


5  Sterling  •  Irvine  •  California  92618-2517  •  (949)  586-9950  •  Fax:  (949)  583-9514 
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Introducing  the  Router  that’s  easier  to  configure. 


Call  800-223-9758  to  receive  a  FREE  demo  Emerald  to  try 
for  45  days.  If  you're  not  convinced  it’s  the  easiest  router 
you’ve  used,  send  it  back.  What  could  be  easier? 


Web 
Browser 
Configuration. . . 
It’s  Easier! 


Take  a  look,  you’ll  like  what  you  set*,  s' 


American  Technology  800-777-5511of +1-406-777-5511  (ax:  406-777-5512  email:  mfo@a1li.com 


American 

TECHNOLOGY 

www.atli.com 


Introducing  The  Emerald,  a 
Frame  Relay  Access  Router  to 
replace  all  others.  Why?  Web 
Browser  Configuration!  Use 
Netscape  4.5  or  MS  IE  4.0  to 
set  up  and  configure  your 
Emerald.  The  Emerald  allows 
you  to  monitor  your  network 
from  your  desktop  using  the 
Web  Browser  you  use  every 
day.  For  less  than  the  price  of 
one  week’s  training  on  those 
other  routers,  you  can  be  up 
and  running  in  minutes! 
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Firewall 


WWW.ICSA.NET 


•  Proven  Firewall  Technology 

•  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Transparent  Network  Access 

•  Easy  to  Configure  &  Operate 

•  Remote  Web  Based  Management 

•  Cost  Effective 

•  Time  Based  Access  Control 

•  URL  &  Content  Filtering 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy 

•  ISDN,  xDSL  &  Cable  Modem  Support 

•  Win95/NT  Management  Client 

$  995.00 


1 -800-775-4GTA 

Web:  http://www.gnatbox.com 
Email:  gb-sales@gta.com 
Tel:  +1  -407-380-0220  Fax:  +1-407-380-6080 
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STATION  4 
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MANAGE  1,000  SERVERS 


from  4  or  more  KVM  stations 


Call  800-333-9343  for  your  catalog 

v(% 

ELECTRONICS 

WWW.ROSEL.COM 


USA  Office:  10707  stancliff  road  Houston,  Texas  77099  phone  281-933-7673  Fax  281-933-0044 
UK  Office:  Phone  +44  (O)  1264  850574  Fax  +44  (O)  1264  850529 


Rose  has  done  it  again!  The  UltraMatrix  is  a  keyboard-video-mouse  (KVM)  switch  that  has  all 
the  features,  is  the  simplest  to  use,  and  costs  the  least. 


Simultaneous  access  from  4  or  more  KVM  stations 
Supports  multiple  platforms:  PC,  Sun,  Unix,  others 
Full  keyboard  and  mouse  emulation  for  automatic 
booting 

Expands  easily  with  plug-in  cards 
Sleek  on-screen  display  simplifies  user  interface 
Innovative  cabling  system  makes  installation 
clean  and  easy 
Uses  less  rack  space  than  other  switches 
Security,  access  groups,  user  profiles,  status  GROW  WITH 
screen,  flash  memory,  and  more  ROSE  PRODUCTS 


Rose  has  been  providing  innovative  solutions  since  1984.  We 
have  a  complete  line  of  KVM  switches  for  server  rooms, 
classrooms,  desktops,  and  other  uses.  Ask  us  about  our 
KVM  extenders  using  coax  or  twisted  pair.  We  also 
have  an  extensive  line  of  serial  and  parallel  data 
switches.  Call  us  today  to  discuss  your  application. 


Aerospace/Military 


Computer  Room 


Plant  Control 


Trading  Room 


Control  consoles  Class  Room/Corporate 


STATION  1 


STATION  2  STATION  3 


—  K  A  U T  D  r*  C\  K  A  ZZ  (BOO)  364-8838  or  (281 )  495-6500 

— i/V\L  I  KULUIVl—  Fax (281)  495  8449 
COMMUNICATIONS,  INC  www.metrocominc.com 

ARE  YOU  Y2K  COMPLIANT?? 
UPGRADE  NOW! 


DETROIT  ROUTER 


OVERNIGHT 

ADVANCE 

REPLACEMENT 


ORDER  TODAY 
SHIP  TODAY 


T1/E1  CHANNEL  BANKS  ROUTERS  CSU/DSUs 

IN  STOCK 


0 


Y2K 


m  lies)  PACKA6E  R/12 
KU 


,  I..,  /  b  ■ 


NEWBRIDGE  3624  MAINSTREET  CHANNEL  BANK 
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AT  HOME, 
HOW  YOU 
SURF  IS 
YOUR 
BUSINESS. 


AT  WORK 


Immediately 

increase 

productivity. 

Monitor,  report  on,  or 
block  all  Internet  access. 


LittleBrother 

"Little  Brother  is  watching  you  use  the  Internet" 

546  Valley  Way  Milpitas,  CA  95035 
Ph:  1.800.200.9881  Fax:  408.263.9883  salesv>’kansmen.com 
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Network  managers  -  take  control! 


APC  MasterSwitcIT:  the  right  answer  for 
remote  reboot  requirements 

Imagine  having  the  ability  to  power-on  and  power-off  sensitive 
communications  and  computer  equipment  instantly  in  a  remote 
office  S00  miles  away  without  raising  an  eyebrow.  With  APC's 
MasterS witch",  you  have  no  reason  to  panic,  and  no  need  to 
dispatch  costly  service  people.  You  control  power  to  remote 
equipment  from  your  desktop  or  laptop  via  Web,  SNMP,  Telnet 
or  modem  connection. 

Todav  power  management  translates  directly  into  high  avail¬ 
ability.  For  network  operations,  the  ability  to  remotely  reboot 
locked  equipment  and  bring  each  device  back  on-line  quickly 
represents  a  big  boost  in  productivity. 

The  APC  MasterSwitch  saves  corporations  thousands 
of  dollars  a  year  by  eliminating  unnecessary  field 
~  service  technician  calls.  Test  drive  MasterSwitch  and 
see  what  APC's  Legendary  Reliability'"  is  all  about. 


Ho 


*1 


•-S2 


4%- 


MasterSwitch  benefits  include: 

•  Eight  independently  controlled 
svsitchable  outlets  for  remote 
rebooting  of  equipment 

•  Requires  only  1U  of  rackmountable 
space 


Visit  APC's  Web  site  today  to  receive  your  FREE 
APC  Network  Enhancement  Solutions  Kit  and 
test  drive  MasterSwitch  on-line  before  buying! 

KEY  CODE 

http://promo.apcc.com  m84iz 

CALL:  (888)  289-APCC  x7579  •  FAX:  (401)  788-2797 


Provides  in  and  out-of-band  connectivity 
to  manage  devices  (Web,  SNMP,  Telnet 
or  modem) 

Tremendous  savings  on  costly  field 
technician  service  calls 


Legendary  Reliability" 


©1995  A-^Tcan  Pc.v?'  Co-versacr  A  '3oe-".=-vS  are  tne  prooerty  of  the  '  owners  MS2A9EP-US  •  PowerFax:  (800)  347-FAXX  •  E-mail.  apcinfo@apcc.com  •  132  Fairgrounds  Road,  West  Kingston,  Rl  02892 
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2000  is  coming! 
Is  there 

something  missing 
in  your  network? 


Datum  Network  Time  Servers 


SNMPc  Enterprise 
Manager 

Distributed  management 
for  Windows  NT.  Supports 
remote  consoles  and 
polling  agents,  Web  Trend 
Reporting  and  more. 


SNMPc  WorkGroup 
Manager 

Affordable  management 
for  small  networks. 

With  an  installed  base 
of  over  60,000  copies, 
this  popular  tool  is  resold 
by  major  OEMs,  including 
Cisco  and  ACC. 


Network 

Management 

for  Microsoft  Windows 


Castle  Rack 

Computing 

Phone:  408.366.6540 
Fax:  408.252.2379 
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I  On  Screen 
Display! 


MENU 

A;CURSORUP 
▼  CURSOR  DN 
4  :PREV.  BANK 
►  :NEXT  BANK 
INS:RENAME 
ENTER:SWITCH 
ESC:EXIT  OSD 
F1:TIME  EDIT 
E2:SCAN  MODE 
:POWER  ON 


Microsoft"  Exam  Simulal 


Microsof 


It  ail  conies  down  to  questions.  Questions 
that  challenge  your  expertise  about  Microsoft 
products.  Question  yourself  -  are  you  ready? 
Be  absolutely  sure.  With  Spike  and  the  gang's 
certification  guarantee,  you  will  be.  Because 
once  you've  completed  the  program,  you'll  pass 
with  flying  colors  or  get  your  money  back.* 
And  don't  worry,  because  as  Microsoft 
Certification  changes,  Transcender  will 
have  you  covered. ..without  question. 


Most  Realistic  MCSE  and  MCSD 


Simulations  Available 


Detailed  Answers  and  Explanations 


MEW!  Computer  Adaptive  Testing  Features 


CPU  Switch  Plus 


NEW!  Simulation  Questions 


Money  Back  If  You  Don't  Pass  Guarantee 


From  $129  -  $179 

Transcender.  America’s  #1  Exam  Preparation  Software.  TrSPISCGfldGr 

Corporation 

To  order,  call  Howard  @  (615)  726-8779  or  fax  (615)  726-8884;  242  Louise  Ave.;  Nashvil le,  TN  37203 

i  j  _  _  ___  ©  1999  Transcender  Corp.  All  Rights  Reserved.  Microsoft  is  a  registered  trademark  o 

W  Vw  W  .  irdllbieillier.lU  IBl  Microsoft  Corporation.  Multi-user  licenses  are  available.  *Call  or  see  our  Web  site  for  details 


1-800-652-6776 

www.edimax.com 


ISO-9001  Company 


For  Free  Product  Info  • 


Edimax  CPU  Switch  Plus 


CPU  SWITCH  PLUS 


Control  multiple  PCs 
from  a  single 
Keyboard,  Mouse, 
Monitor,  Speakers, 
and  Microphone! 


SCAN  INTERVAL 

10SEC  20SEC  40SEC 


Questionable 


Guaranteed 


On-Screen  Display 
MS  Intellimouse 


Multimedia  Support 


High  Video  Resolution 


a  Control  up  to  128  PCs 
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INTRODUCING 

LAN/WAN 


Observer  identifies  network  trouble  spots,  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  network  slowdowns  would  you 
know  if  they  are  being  caused  by  packet  errors, 
broadcast  storms  or  overloaded  utilization?  Find  out 
with  Observer  or  Distributed  Observer. 

•  Full  packet  capture  and  decode  for  over  300 

protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBUEl,  IPX/3PX,  Appletalk,  SNA, 

and  DECnet. 

•Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  the  entire  switch  or 
packet  capture  from  any  port  or  portsFinally  a 
protocol  analyzer  that  can  be  used  in 
switched  environments! 

•  Long-term  network  trending  collects  statistical 
baseline  data  lor  days,  weeks,  months  or  years 
for  review  and  reporting. 

•  Distributed  version  available  for  $1290  (includes 
1  local  and  1  remote  Probe).  Additional  Probes 
are  $295  per  local  or  remote  segment  or  switch. 

•  Network  Instruments'  optimized  ErrorTrack™ 

NDIS  drivers  display  true  errors-by-station. 

Includes  collision  expert. 

•  Track  router  utilization/traffic  in  real  time 
•  Ethernet  (10/100/1000),  Token  Ring.  FDD I 


AND 


ON  YOUR  SWITCH 


See  what  you  have  been  missing!  Call  800-526-7919  lor  a  FREE  DEMO  or  download  from  our  web  site. 


©  1999  Network  Instruments.  LLC  -  Corporate  Headquarters  (612)  932*9899  FAX  (612)  932*9545 
UK  and  Europe  +44  (0)  1322  303045  FAX  +44  (0)  1322  303056  info** networkmstruments.com  www.networkmstrumonts  com 
Ob  sewer  Network  Instruments  and  the  *N’  logo  are  registered  trademark  of  Network  Instruments,  LLC  Minneapolis.  MN  USA 


Out-of-Band  Console  Acc<  ;s 

Server  "  Trouble-shoot  network 
problems  from  anywhere  " 


Connection  Hub  Router 


•  Menu  driven  interface,  unique  naming  for  each  device 

•  Modular  design  for  easy  expansion  or  changes 

Optional  Ethernet  (Telnet),  Dial-up  and  local  RS-232  access 
®  Internal  33.6  kbps  modem  with  built-in  lightning  protection 

•  3,6,9  slot  units,  4-32  devices  supported 


Bay  Tech’s  DS-Series  Data  Switch  is  modular  in  design.  The  base  unit,  access 
modules  and  RS-232  I/O  modules  ordered  determine  the  type  of  access  you  have 
and  how  many  devices  you  can  communicate  with.  The  modular  design  also 
provides  easy  expansion,  simply  install  another  four  port  RS-232  I/O  module 
and  you  have  access  to  four  additional  devices. 


Also  available:  REBOOT  LOCKED  EQUIPMENT  with  BayTech 
power  control  solutions 


BayTech 


ITU 


800-523-2702  www.baytechdcd.com 

International:  228467-8231  Fax:  228-467-4551 
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t  work  Buy  •  The  Hub  of  t  he  S  et  work  Buy 
'ie  Network  Buy  *  The  Huh  oftHkNetw 


For  Free  Product  Info  < 


/orkworid.cottt/5i!tfo?ipre«g 


CableStore 


vj  yj  m 


Save  Big  On  ISO  9000  Manufactured  Networking  Catdi 

BfUSs^SSS  X  Assembled  &  Tested  to  Manufacturers’  Specs  &  Industry  Standarctsfe 

“«C*-Sjefc !_  "  ^  *  '  ■'  •  '  '  *' 

Immense  Inventory  -  Overnight  Delivery  -  Fully  Wairr^ht^  y  tli 

■  ■  ‘  '  a  • '  ■'■■■■•.-  N/’NiNM 

©.;  ■  ■ . V-  v;v.;.4 '  • . .  4* 

Compare  To:  ADC  Kentrox,  Bay  Networks,  Motorola,  Ascend,  Digital  Link,  General  DataComm,  Paradyne,  Micom,  Premisvs,  Cisfco/ytul 

' 
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Coming  lip  in  August 

Issue  Date 

Aug.  16  Review:  License/metering  software 

close:  Aug.  4  Review:  Server  auditing/ reporting 

Review:  Dell  PowerEdge  6350  server 
Special  Focus:  Voice  over  DSL 

Aug.  23  Review:  Monitoring/alerting  software 

dose:  Aug.  1 1  Special  Focus:  The  role  of  procurement 

cards  in  electronic  commerce 

Aug.  30  Review:  Delano  e-mail  app.  server 
close:  Aug.  18  Review:  Toshiba  Magnia  7000  server 
Special  Focus:  Tips  for  building  storage- 
area  networks 

To  reserve  your  ad  space  call 
1-800-622-1108  ext.  7507 

Please  note  that  technology  updates,  and  comparative  and  single  product  review 
dates  and  topics  are  subject  to  change  without  notice. 


4LANW/\ni.  COM 


Purveyors  of  Networking  Hardware 


NEW 

& 

USED 

Switches, 
Modules, 
Routers, 
Hubs  &  More 


Cut!  Smm 


Bay  Networks 


caaerRon 

srsiems 


droteon 

J&WM  ISP^K  | 

=S5ynOptics  in  101. 

SMC*  OlkRobotics  -  CHIPCOM 


BUY 

& 

SELL 

Quantity,  Reseller, 
Government  & 
Education,  Discounts 
available. 


LOWER  PRICES  THAN  THOSE  WAREHOUSE  GUYS! 


4-Lowest  Prices  on  Factory 
Fresh  Equipment 
+  Up  to  90%  OFF  Retail 
for  Refurbished  Items 
-♦-Huge  Inventory  of 
Legacy  Products 
+  Factory  Trained 

Consultants  on  Staff 

Fax  us  Your  Want  to  Sell  / 


-♦-Authorized 
Service  Center 
+  We  Also  Do  Repair: 

&  Exchanges 
-♦•Same  Day  Shipping 
on  Most  Items 
-♦Same  Day  Delivery 
Via  Counter  Service 

Buy  Lists  @  516-293-5325 


L  LS[U  CU.L-  Mirk.  LUU/t  Cil-LUlsr  iT/lC/i/iiilO 

£  .-Lucuca  v§  UxlUvl  Vvl^-LZUtLV^ZUil.CClAl 

A  Division  of  Ergonomic  Enterprises,  Inc. 

CA.LL  VU  LL  L-LOflk  LZ^LvlVv!  ZUlL 

International  Calls:  001-1-516-293-5200  /  E-mail:  Sales@4LANWAN.COM 


mi  EH  WWW.4LANWAN.COM,  Inc.  ^ 

^  A  Division  of  Ergonomic  Enterprises.  Inc. 

C.O.D.  icwmrwjjiga  Harjigwigwaa  hheb 

PBWHRgBI  logos  are  registered  trademarks  of  the  companies  they  represent 
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5f^  Bay  Networks  CaBLCTTOH 


The  Merged  Company  of  SynOptics  and  Wellfleet 


Cisco  Smm 


i 


■ : 


We  Stock  the  Largest  Inventory  of 
Refurbished  Bay  Networks  in  the  World! 


V  a 


rw 


Bay  Networks  ESP  Trained 
Bay  Networks  Authorized 
Full  Product  Line 
New  &  Used,  Buy  &  Sell 


Proven  Track  Record 
Good  As  New  Warranties 
Repair  Services  Available 
Technical  Support 


Phone  801-377-0074 
Fax  801-377-0078 
1403  W.  820  N.  Provo,  UT  84601 

Visit  us  On  the  Web  @  www.nle.com 


National  LAN  Exchange 

888.89 1.4BAY  (4229) 

Fast  overnight  delivery 


C.O.D's  Terms 
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NetworkWorld 


Jnfo.  press 


Online  Reader  Service 


For  FREE  Product  Information 
GO  Online! 

www.networkworld.com/ infoxpress 


Made  in  U.S.A. 

Factory  Direct 

Ethernet  Converters,  » 
Transceivers,  Repeaters 
&  Switches 

Fiberdyne  10BASET-10BASE-FL  $148 

AUI-10BASE-FL  119 

100TX-100FX  Converter  319 
409 
374 
895 
585 
294 
595 


10T-10FL  Single 
10FL-10FL  Repeater 
10FLMM-10FL  SM 
10FL-10FL  Repeater  SM 
10/100TX-100FX  2  port  switch  MM 
10/1 00TX-100FX  2  port  switch  SM 
20  Slot  Chassis  10T-10FL  $183  per  port 

20  Slot  Chassis  100TX-100FX  $354  per  port 


www.fiberdyne.com 


A  FIBERDYNE  LABS,  INC. 

127  Business  Park  Dr..  Frankfort,  NY  13340 
Tel.  (315)  895-8470  Fax  (315)  895-8436 
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Livingston  US  Robotics 

Ascend  0,  ® AY  Micom 

.O  K 

&  Specialist  in  all 
U  Cisco  products  73 

(/)  includin'’  Memory  ^ 

0  “ 

r  LAN/WAN  Products  _ 

Kr  P 

q  New,  Used,  Lease,  ^ 

3Com^6f  Rent  ^  Codex 
Adtran  ^  Xylogics 

Motorola  Wellfleet 

We  carry  all  Manufacturers 


Millennium  Solutions  Group,  Inc.l 


•Routers,  Bridges  *Frame  Relay 
•DSU/CSU’s  ‘Hubs,  Modems 

•Switches,  ATM  »Voice  over  Data 


We  Buy  and  Sell 

888-801-2001  Fax  (916)  630-2000 
Visit  our  Web  Site  at: 
http://www.millenniumsolutions.net 
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LAN/WAN  •  BUY/SELL 
FULLY  WARRANTEED 
NEW/REFURBISHED 


MODEMS 
DSU/CSU’s 
T-1  EQUIPMENT 
SWITCHES,  MUXES 
HUB,  BRIDGES,  ROUTERS,  ETC. 


Cabletron  Bay  Networks 


Cisco  Specialists 


3Com  Micom  Adtran  H/P 

We  carry  all  manufacturers,  call  ask  for  sales 


http://www.adcs-inc.com 
PHONE 
800  783-8979 

FAX  (916) 
.781-6962 


For  Free  Product  Info  .  www.networkworld.com/infoxpress 
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29th  Street  Press 

(800)  621-1544 
www.29thstreetpress.com 
MCSE  Study  Guides  and  AS/400 
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News 


Lotus  introduces  instant  meetings 


BY  JOHN  FONTANA 

CAMBRIDGE,  MASS.  — 
Lotus  last  week  enhanced  its 
Sametime  real-time  collabora¬ 
tion  server  with  a  new  fea¬ 


ture  that  lets  end  users  set  up 
instant  meetings. 

The  instant  meeting  tech¬ 


nology  in  Sametime  1.5  builds 
on  the  product’s  existing  real¬ 
time  chat  technology.  Lotus’ 
intent  is  to  let  users  instantly 
convene  an  interactive  data 
conference  online,  complete 


with  documents,  spread¬ 
sheets,  interactive  presenta¬ 
tions  and  other  applications. 


Lotus  also  revealed  that  its 
Sametime  Connect  Client  for 
instant  messaging  now  works 
with  America  Online’s  Instant 
Messenger;  the  integration 
stems  from  a  deal  the  firms 
struck  in  January.  The  rela¬ 
tionship  is  in  sharp  contrast 
to  a  battle  AOL  and  Microsoft 
began  last  week  after  Micro¬ 
soft  took  it  upon  itself  to  link 
its  instant  messaging  client  to 
AOL’s  Instant  Messenger. 

While  Lotus’  Sametime 
technology  hasn’t  taken  off 
yet  in  the  enterprise,  the  tech¬ 
nology  is  gaining  momentum. 

“We’ve  done  a  cost  analysis 
of  our  overnight  packages, 
faxes  and  phone  calls,  and  we 
think  we  will  see  a  payback 
on  the  Sametime  server  with¬ 
in  a  year,”  says  John  Lugar, 
executive  vice  president  of 
WestSphere  Equity  Investors 
LP,  an  equity  investment  com¬ 


pany  in  New  York.  West- 
Sphere  is  spread  across  North 
and  South  America  and  is 
very  document-driven,  ac¬ 
cording  to  Lugar. 

“Now  I  send  an  instant 
message  to  a  colleague  in 
Buenos  Aires,  and  we  can 
begin  to  collaborate  on  docu¬ 
ments  in  real  time,”  he  says. 

Sametime  1.5  uses  its 
instant  messaging  feature  as  a 
way  to  invite  users  into  an 
instant  meeting.  When  an 
invitee  responds,  an  applet  is 
loaded  into  the  end  user’s 
browser  to  support  the  shar¬ 
ing  of  data  and  applications. 

The  service  can  support  ses¬ 
sions  with  internal  and  exter¬ 
nal  end  users.  However,  tra¬ 
versing  a  firewall  can  be  tricky. 
To  address  this  issue,  Sametime 
1.5  includes  tunneling  capabil¬ 
ities  for  HTTP,  HTTPS  and 
SOCKS  4.0  and  5.0. 


“Lotus  is  attempting  to  en¬ 
hance  its  proxy  support,  but 
the  issue  is  not  easy  to  over¬ 
come  because  firewall  tech¬ 
nology  varies  so  much,”  says 
Mike  Comiskey,  an  analyst 
with  International  Data  Corp. 
in  Framingham,  Mass. 

Lotus  Sametime  1.5  server, 
which  is  scheduled  to  ship 
next  month,  includes  a  tool 
kit  for  building  applications 
and  supports  16  languages. 
The  server,  which  runs  on 
Windows  NT,  is  priced  at 
$5,000.  The  client  access 
license  is  $20  per  user.  An 
extranet  version  of  the  server 
is  priced  at  $10,000  and  pro¬ 
vides  for  an  unlimited  num¬ 
ber  of  users. 

Also  last  week,  Lotus  ac¬ 
quired  Macromedia’s  Path- 
ware,  a  technology  for  manag¬ 
ing  and  tracking  online  class¬ 
room  work.  Lotus  plans  to 
integrate  the  technology  into 
Lotus’  LearningSpace  server, 
which  supports  instructor-led 
virtual  classrooms. 

Lotus:  www.lotus.com 


Ready  in  an  instant 

Lotus  last  week  unveiled  the  next  version  of  its  Sametime  server 
for  instant  messaging,  chat  and  application  sharing.  Here  is  a 
look  at  its  features: 


Feature 

Description 

Instant  Meeting 

Shares  data,  applications  with  groups  of  users. 

Connect  Client 

Now  compatible  with  AOL  client. 

Administration 

Real-time  user  monitoring,  message  broadcast. 

Message  Encryption 

Feature  now  works  throughout  Sametime  environment. 

Tool  kit  upgrade 

New  APIs  to  build  meeting-based  applications. 

Messaging, 

continued  from  page  1 

messaging  standard.  AOL’s 
support  of  the  group  — 
which  is  expected  to  propose 
a  standard  before  year-end  — 
is  important  because  AOL 
has  40  million  users  of  its 
instant  chat  and  buddy  list 
capabilities. 

In  a  related  move,  AOL 
asked  several  computer  in¬ 
dustry  leaders  to  join  an 
advisory  committee  on  in¬ 
stant  messaging  standards. 
The  committee  consists  of 
Apple  interim  CEO  Steve 
Jobs,  AOL  Chief  Technology 
Officer  Marc  Andreessen,  Real 
Networks  Chairman  Rob 
Glaser  and  Novell  CEO  Eric 
Schmidt. 

Missing  from  the  commit¬ 
tee  is  Microsoft,  which  is 
engaged  in  a  still-unresolved 
battle  with  AOL  regarding 
the  ability  of  their  instant 
messaging  systems  to  work 
together. 


Read  Network 
World  columnist 
Mark  Gibbs'  take 
on  the  AOL- Micro¬ 
soft  battle  over 
instant  messaging. 
See  "Backspin," 
page  54. 


Whether  AOL’s  committee 
will  advance  the  standards 
efforts  remains  to  be  seen. 
“The  members  are  recogniz¬ 
able  names  but  not  necessari¬ 
ly  people  who  will  make 
technical  decisions  about 
what  will  go  out  over  the 
wire,”  says  Gordon  Mohr, 
CTO  at  Activerse  and  a 
member  of  the  IETF  group. 
More  important  is  if  AOL’s 
engineers  “express  their 
interest  and  expertise  inside 
the  IETF,”  he  says. 

Getting  a  standard  ap¬ 
proved  will  further  drive 
corporate  use  of  instant  mes¬ 
saging,  predicts  Mohr,  whose 
company  sells  Ding,  an  in¬ 
stant  messaging  package 
for  corporate  environments. 
“Having  a  standard  will  make 
instant  messaging  a  safer 
choice,”  Mohr  says,  adding 
that  a  standard  could  push 
the  technology  “into  over¬ 
drive.” 

“Instant  messaging  is  going 
to  be  hugely  important.  It 
could  easily  be  the  next 
killer  application,”  says  Keith 
Moore,  an  applications  area 
director  for  the  IETF  and 
a  researcher  at  the  University 
of  Tennessee.  “It’s  very  use¬ 
ful  for  people  who  are 
telecommuting  to  be  able 
to  see  who  else  is  online  and 
have  quick  chats  with  their 
co-workers. 


“The  telephone  turns  out 
to  be  very  awkward  in  these 
situations.  .  .  .  ,”  he  continues. 
“But  where  instant  messaging 
has  a  lot  of  potential  is  when 
it  is  combined  with  wireless 
technology.  It  will  help  peo¬ 
ple  stay  in  touch,  not  just 


when  they’re  in  front  of  their 
computers.” 

The  IETF’s  Instant  Mes¬ 
saging  and  Presence  Protocol 
standard  is  still  in  its  prelimi¬ 
nary  phase. 

“The  working  group  is  try¬ 
ing  to  define  the  problem  that 
the  standard  will  solve,” 
Moore  says. “People  have  very 


different  ideas  about  what 
instant  messaging  is.  .  .  .We 
need  to  make  sure  that  scala¬ 
bility  and  security  are  built 
into  the  standard.  And  it  has  to 
be  able  to  deal  with  wireless 
transmission.” 

Moore  predicts  the  stan¬ 


dard’s  first  draft  will  be 
released  by  year-end,  and 
companies  will  start  support¬ 
ing  the  standard  in  their  prod¬ 
ucts  early  next  year.  Comp¬ 
anies  represented  in  the  IETF 
group  include  Lotus,  Micro¬ 
soft,  AT&T  and  Activerse. 

Members  of  the  IETF  group 
look  forward  to  participation 


from  AOL  engineers. 

“Regardless  of  whether  this 
speeds  up  or  slows  down  the 
work,  a  broader  constituency 
seems  likely  to  improve  the 
quality  and  acceptability  of 
the  result,”  Moore  says. 

Patrik  Faltstrom,  an  applica¬ 
tions  area  director  with  the 
IETF,  says  the  group  will 
develop  its  standard  using  a 
“rough  consensus”  approach. 
The  procedures  used  by  the 
IETF  will  put  AOL  on  the  same 
footing  as  companies  such  as 
Microsoft  that  are  already  par¬ 
ticipating  in  the  group. 

“We  can  look  forward  to 
interesting  work  in  the  IETF,” 
he  says. 

Instant  messaging  stan¬ 
dards  came  into  the  forefront 
in  late  July,  when  Microsoft 
introduced  MSN  Messenger 
service,  which  lets  its  users 
communicate  with  users  of 
AOL’s  Instant  Messenger  ser¬ 
vice  as  well  as  other  users  of 
Microsoft’s  product. 

AOL  asserts  that  Micro¬ 
soft’s  action  was  unautho¬ 
rized,  and  as  a  result,  AOL  is 
blocking  traffic  from  MSN 
Messenger  users.  AOL  also 
blocks  instant  messaging  traf¬ 
fic  from  Yahoo  and  Prodigy 
Communications.  B 
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Instant  messaging:  You've  got  choices 

Some  examples  of  instant  messaging  programs  and  where 
to  download  the  software: 

•  America  Online's  Instant  Messenger  service.  Available  at  www. 
aol.com,  lets  users  find  and  chat  with  AOL  and  Lotus  Sametime  users. 


•  Microsoft's  MSN  Messenger  service.  Available  at  home.microsoft.com, 
lets  users  find  and  chat  with  MSN  and  AOL  users. 


•  Lotus  Sametime  1.5.  Available  atwww.lotus.com/home.nsf/tabs/sametime, 
lets  uses  find,  chat,  share  documents  and  applications,  and  host  meetings 
with  other  Sametime  and  AOL  users. 


•  Tribal  Voice’s  PowWow  for  Private  Networks.  Available  at  www. 
tribalvoice.com,  lets  users  find,  chat,  talk  and  transfer  files  to  other 
PowWow  users  individually  or  in  groups. 

•  Activerse’s  Ding!.  Available  at  www.activerse.com,  lets  users  find,  chat 
and  exchange  files  with  one  or  more  Ding  users. 
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Linux, 

continued  from  page  6 

“This  is  probably  the  most 
flexible  application  of  this  con¬ 
cept  that  I’ve  seen,”  says  one 
systems  integrator  who  has 
been  beta-testing  the  product, 
but  asked  not  to  be  identified. 

He  says  that  when  Turbo- 
Linux  releases  the  full  version 
of  the  software  tills  fall,  the 
product  will  likely  support  IP 
tunneling  and  Novell  Directory 
Services,  and  include  server 


management  capabilities. 

TurboLinux,  formerly  known 
as  Pacific  Hi  Tech,  declined  to 
provide  pricing  information 
for  TurboCluster.  Beta  testers 
expect  the  software  to  sell  for 
less  than  $  1 ,000  per  server. 

Show  roundup 

Here  is  sampling  of  other  an¬ 
ticipated  announcements: 

•  IBM  plans  to  introduce  a 
new  workgroup  PC  server  opti¬ 
mized  to  run  Linux  from  Red 
Hat,  SuSe,  TurboLinux  or 


Innovation, 

continued  from  page  1 

their  equipment  suppliers  and 
Internet  software  companies  — 
not  makers  of  enterprise  net¬ 
work  gear.  According  to  the 
quarterly  Network  World/ 
PricewaterhouseCoopers 
Venture  Capital  Survey,  nearly 
75%  of  the  more  than 
$2  billion  in  venture 
capital  spent  during 
the  first  quarter  went 
toward  Internet  com¬ 
panies  (7VR/  May  24, 
page  1). 

“It’s  not  even  fun  to 
play  in  the  enterprise  market 
anymore,”  says  Tony  Sun,  manag¬ 
ing  general  partner  at  New 
York-based  Venrock  Associates, 
which  now  largely  invests  in 
companies  that  cater  to  service 
providers  and  small  businesses. 
“Forget  the  products.  It’s  all 
about  distribution.” 

Customers  are  also  noticing 
the  trend.  “I  do  see  the  empha¬ 
sis  from  most  of  the  product 
providers  going  into  the  carrier 
market  these  days,”  says  Mike 
Ackermann,  manager  of  net¬ 
work  planning  and  design  at 
Blue  Cross/Blue  Shield  in 
Detroit.  His  company  is  already 


being  pitched  equipment  usual¬ 
ly  aimed  at  carriers,  as  it  consid¬ 
ers  deploying  Nortel  Networks’ 
Passport  switches.  Ackermann 
says  the  switches  are  rock-solid 
and  reliable,  but  more  complex 
to  support  than  typical  enter¬ 
prise  gear. 

Why  this  ambivalence 
toward  the  enterprise? 

One  reason  is  that 
Cisco’s  dominance  of 
the  enterprise  market 
leaves  little  room  for 
newcomers,  observers 
say.  And  with  the  con¬ 
tinuing  commoditiza¬ 
tion  of  enterprise  net¬ 
work  hardware,  Cisco  and  oth¬ 
ers  with  established  distribu¬ 
tion  channels  have  a  decided 
edge  over  start-ups. 

Even  leading  network  equip¬ 
ment  makers  are  investing  a 
smaller  share  of  their  research 
and  development  dollars  on 
enterprise  gear.  Cisco,  for  exam¬ 
ple,  now  splits  its  R&D  spend¬ 
ing  about  evenly  between 
enterprise  and  service  provider 
technology  —  this  from  a  com¬ 
pany  whose  service  provider 
business  unit  is  only  about  a 
year  old. 

It  also  seems  that  there  are 
few  ideas  being  bom  that  are  so 
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News 


Caldera.  The  2500  MT  server  is 
a  two-way  Intel  processor- 
based  box  that  will  likely  cost 
less  than  $2,000.  IBM  is  also 
expected  to  release  RAID 
adapter  cards  with  drivers  writ¬ 
ten  to  Linux  specifications.  IBM 
declined  to  disclose  details 
about  other  upcoming  Linux 
announcements,  but  said  it 
would  be  very  active  at  the 
show. 

•  Magic  Software  will  release 
a  Linux  port  of  its  eMerchant 
business-to-business  electronic 


commerce  application.  The 
product  provides  transaction 
processing  and  consumer  pro¬ 
filing  capabilities.  EMerchant 
works  with  Informix  and 
Oracle  databases,  and  runs  on 
the  latest  commercial  distribu¬ 
tions  of  Linux.  Pricing  informa¬ 
tion  was  not  available. 

•  NovaStor  will  introduce  a 
version  of  its  PC  and  worksta¬ 
tion  backup  product  for  Linux. 
NovaBackup  8  will  support 
tape  as  well  as  CD/DVD  back¬ 
up.  The  product,  which  will 


cost  about  $60  per  user,  will 
also  run  on  Windows  95,  98 
and  NT,  and  OS/2. 

The  company  is  also  work¬ 
ing  on  porting  its  NovaNet 
enterprise  backup  product  to 
Linux  by  year-end. 

TurboLinux:  www.  turbo 

linux.com;  IBM:  www.ibm. 
com;  Magic:  www.magic-sw. 
com;  NovaStor:  www.nova 
stor.com 

Senior  Writer  Marc  Songini 
contributed  to  this  story. 


Playing  catch-up 

Though  the  market  for  service  provider  data  network  equipment  is  smaller  today,  it  is  growing 
at  a  much  faster  rate  than  the  market  for  enterprise  data  network  equipment. 


Service  provider  data  network  equipment 
Enterprise  data  network  equipment 
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Note:  Percentages  represent  year-to-year  growth. 


revolutionary  they  require  new 
companies  to  promote  them. 
Emerging  technologies  such  as 
10G  bit/sec  Ethernet,  for 
instance,  will  probably  just  be 
added  to  existing  products 
rather  than  form  the  basis  of 
new  companies. 

The  new  breed  of  equipment 
makers  —  companies  such  as 
Juniper  Networks  and  Atmos¬ 
phere  Networks  —  is  attracted 
to  the  service  provider  equip¬ 
ment  market,  which  market 
research  firm  International  Data 
Corp.  says  is  growing  three 
times  as  fast  as  the  enterprise 
network  equipment  market. 

Many  of  the  established  net¬ 
work  equipment  firms,  such  as 
Cisco,  Nortel  and  Cabletron,  are 
actually  playing  both  sides  of 
the  fence  by  catering  to  enter¬ 
prise  net  customers  and  service 
providers.  They  are  looking  to 
deliver  gear  for  building  “end-to- 
end”  networks  that  stretch  from 
customer  sites  into  the  core  of 
service  provider  networks. 
Some  of  their  new  products 
will  be  used  for  managed  ser¬ 
vices,  in  which  service  pro¬ 
viders  locate  equipment  on  cus¬ 
tomer  sites,  then  monitor  the 
gear  for  the  customer. 

Meanwhile,  the  last  of  the 


core  enterprise  network  equip¬ 
ment  start-ups  are  going  public. 
Extreme  Networks  had  its 
initial  public  offering  in  April, 
while  Foundry  Networks  and 
Alteon  WebSystems  filed  to  go 
public  earlier  this  summer. 

But  industry  watchers  don’t 
think  the  companies  will  stay 
independent  for  long.  Even 
FORE  and  Xylan  —  both  of 
which  successfully  sold  enter¬ 
prise  network  gear  for  much  of 
the  1990s  despite  competition 
from  larger  vendors  —  have 
been  swallowed  up  in  recent 
months  by  traditional  telecom 
equipment  makers. 

Such  acquisitions  could  fur¬ 
ther  stifle  initiative  because 
telecom  vendors  are  slower  to 
move  than  smaller,  nimbler 
companies,  says  Stan  Schatt,  re¬ 
search  director  at  Giga  Infor¬ 
mation  Group  in  Boston. “We’re 
in  kind  of  a  lull  in  the  enterprise 
campus  network”  in  terms  of 
innovation,  adds  Paul  Zagaeski, 
senior  industry  analyst  at  Giga. 

For  example,  the  demand 
just  doesn’t  appear  to  be  there 
for  advanced  voice  and  data 
convergence  products.  This  is 
partly  because  it’s  so  inexpen¬ 
sive  to  just  throw  bandwidth  at 
surging  network  traffic  loads. 


The  lack  of  quality-of-service 
standards  is  also  delaying 
voice/data  convergence  pro¬ 
jects,  observers  say. 

Industry  watchers  see  oppor¬ 
tunities  for  innovation  at  the 
fringes  of  the  enterprise  net¬ 
work,  rather  than  in  core 
switching  and  routing  func¬ 
tions.  Storage-area  networks  are 
one  emerging  area.  Switches 
that  balance  loads  among  Web 
servers  are  another,  although 
these  are  used  primarily  by 
Web-hosting  service  providers. 
Edge  devices  that  provide  for 
virtual  private  networks  are  also 
gaining  in  popularity  and  have 
become  something  of  a  start-up 
hot  spot. 

But  the  age  of  the  spunky 
start-up  going  after  parts  of  the 
network  ruled  by  Cisco  seems 
to  be  coming  to  a  close. 

“It’s  hard  to  go  after  that  mar¬ 
ket  because  the  distribution 
channel  is  so  splintered,”  says 
Michael  Speyer,  an  analyst  with 
The  Yankee  Group.  “How  do 
you  market  to  10,000  value- 
added  resellers  if  you  don’t 
have  a  huge  war  chest?”  B 
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Paying  attention  to  the  messaging 


MARK 

GIBBS 


t  is  funny  what  we  do  and  don’t 
pay  attention  to  in  the  computer 
business. “Little  company  gets  the 
runaround  by  big  company” 
doesn’t  make  the  news  but  “Big 
company  runs  around  enormous 
company”  does.  Perhaps  I’d  better 
explain. . . . 

Earlier  this  year,  Prodigy  — 
once  the  poster  child  of  the  con¬ 
sumer  online  world,  now  an  enfee¬ 
bled  but  still  fighting  ISP  —  re¬ 
leased  Prodigy  Instant  Messaging 
(PIM).  PIM  is  a  utility  that  does 
what  America  Online’s  Instant 
Messenger  (AIM)  does. 

For  those  of  you  who  have 
managed  to  remain  blissfully 
unaware  of  AIM,  let  me  enlighten 
you:  AIM  is  a  program  that  lets 
you  chat  with  your  buddies 
online.  Once  you  and  your  buddy 
register  with  an  AOL 
server  and  you  log 
on,  that  server 
checks  to  see  if  any 
of  your  friends  are 
also  running  AIM. 

If  you  are  logged 
on  and  any  of  your 
friends  suddenly  logs 
on, AIM  makes  an  irri¬ 
tating  sound  like  a 
squeaky  door  open¬ 
ing  and  lets  you  have 
a  text  chat  session 
with  them.  Kind  of 
interesting,  unless  you’re  a  teen¬ 
ager,  in  which  case  it  is  apparently 
on  par  with  having  your  own 
phone. 

<digression>I’m  getting  burnt 
out  on  the  plethora  of  sounds 
applications  now  generate. 
Combine  those  noises  with  the 
various  beeps  and  pings  that 
hardware  delivers  and  the  aver¬ 
age  office  starts  to  sound  like  the 
depths  of  the  rain  forest.  And  if 
you  like  to  work  with  music  play¬ 
ing,  the  mix  can  be  very  irritat¬ 
ing.  The  Windows  start-up  theme 
goes  very  poorly  with  Sly  & 
Robbie’s  “Drum  &  Bass  Strip  To 
The  Bone,”  the  album  of  the 
month  here  at  Gibbs  Towers. 
</digression> 

<bytheway>And  there’s  an¬ 
other  problem:  identifying  what 
is  making  a  particular  sound.  I 
have  been  trying  to  track  down 
something  in  my  office  that  is 
beeping  every'  few  minutes  for 
almost  a  month.  1  have  enough 


equipment  in  here  to  make  this 
difficult,  and  the  damn  thing  has 
never  gone  off  when  I’m  near 
it.</bytheway> 

Anyway,  one  of  the  neat  things 
about  PIM  is,  or  rather  was,  its  abil¬ 
ity  to  interoperate  with  AIM.  I  say 
“was”  because  despite  openly  pub¬ 
lishing  the  specifications  for  in¬ 
stant  message-style  communica¬ 
tions  to  foster  a  third-party  mar¬ 
ket,  AOL  decided  that  Prodigy  was 
the  kind  of  third  party  it  didn’t 
want  involved  and  blocked  inter¬ 
operation  between  PIM  and  AOL’s 
back-end  services.  Was  that  much 
news?  Nope. 

Now  Microsoft  has  got  in  the 
instant  messaging  act  with  its 
own  version,  Microsoft  Messen¬ 
ger,  and  AOL  has  done  the  same 
thing  to  the  Redmond  mafia’s 
product.  Is  that  news?  You  bet. 

I  suspect  the  reason  it  is  news 
is  simply  because  Microsoft  is 
involved.  This  means  there  is  a 
real,  valuable  market  to  be  fought 
over,  something  that  little  ol’ 
Prodigy’s  involvement  could 
never  validate. 

The  really  interesting  thing  here 
is  AOL’s  positioning.  It  smacks  of 
all  the  antitrust-type  behavior  of 
which  AOL  accused  Microsoft! 
Steve  old  buddy,  you  can’t  have  it 
both  ways. 

Be  that  as  it  may,  it  raises  the 
question  of  wither  instant  mes¬ 
saging?  Will  the  market  explode 
into  a  number  of  isolated  commu¬ 
nities?  Will  some  enterprising 
hacker  create  a  bridge  between 
the  two  systems?  (Perhaps  a  serv¬ 
er  running  multiple  copies  of 
Messenger,  AIM  and  PIM  in  some 
kind  of  wild  proxy  setup?)  Or 
will  the  market,  in  a  mass  bid  for 
freedom,  go  with  the  first  vendor 
to  offer  a  truly  open  standard? 

Microsoft  is  (somewhat  un¬ 
characteristically)  leading  the 
charge  for  an  open  standard,  but 
I’d  love  to  see  the  Internet  Engin¬ 
eering  Task  Force  or  the  World 
Wide  Web  Consortium  get  ultra¬ 
dynamic  and  get  involved. 

This  fracas  is  going  to  be  enter¬ 
taining,  and  as  it  is  played  out,  the 
politics  will  show  the  combatants 
in  all  their  commercial  glory.  My 
money  is  on  AOL  losing  out.  But 
you  can  bet  we  ll  pay  attention. 

News  to  nwcolumn@gibbs.com. 


Outside  of  eBay  cultists,  who  really 
gives  a  hoot  about  using  the  Web  to  auc¬ 
tion  off  Beanie  Babies,  Grandma's  chipped 
china  or  Mark  McGwire  baseball  cards? 

Certainly  not  you,  being  a  no-nonsense 
network  executive. 

But  what  if  a  Web  auction  offered  you 
and  your  business  something  of  far  greater 
value  than  a  musty  stack  of  1970  Playboy 
magazines  or  a  velvet  Elvis  mural?  . . .  How 
about  cheap  electricity  and  natural  gas? 

North  American  Power  Brokers  applies 
Web-based  auctioning  to  that  higher  calling 
by  enlisting  50  energy  suppliers  to  bid 
online  for  electricity  and  natural  gas  orders  from  willing  buyers. 
Based  in  the  old  Digital  mill  building  in  Maynard,  Mass.,  this  'Net 
start-up  has  hit  upon  a  formula  for  exploiting  deregulation  of  the 
$360  billion  energy  industry  —  a  formula  that  has  no  obvious  down¬ 
side  for  customers.  The  auction  service,  known  as  the  Retail  Energy 
Exchange,  resides  on  the  Web  at  www.energyagent.com. 

"We're  convinced  that  all  energy  transactions  are  going  to  occur 
via  the  Web  at  some  point,"  says  Jeff  DeWeese,  chief  operating  offi¬ 
cer  of  North  American  Power,  which  makes  its  money  from  trans¬ 
action  fees  paid  by  bid  winners.  The  30-employee  company  will 
announce  a  name  change  and  service  upgrades  within  the  next  few 
weeks  that  DeWeese  hopes  will  help  build  its  customer  base  and 
ward  off  business  imitators. 

One  North  American  Power  customer  needs  no  more  selling. 

"It's  a  home  run  from  my  perspective,"  says  Bill  Doyon,  general 
manager  at  the  Ethan  Allen  Inn,  a  195-room  hotel  in  Danbury,  Conn. 
"Since  I've  signed  up  with  these  guys  [two  years  ago],  I  can  point  to 
30  or  40  grand  that  I  would  have  been  pouring  out  the  door  if  I  had 
just  gone  with  the  standard  utility.  That's  30  or  40  grand  on  the  bot¬ 
tom  line." 

While  your  mileage  may  vary,  Doyon  says  he  has  saved  20%  to 
25%  on  a  natural  gas  bill  that  had  run  as  high  as  $6,000  per  month. 

Now  that's  what  a  Web  auction  ought  to  do  for  business. 

(By  the  way,  Buzz  has  a  mint  set  of  1985  Topps  baseball  cards  — 
including  the  magic  McGwire  rookie  card  — that  he  just  might  let 
go  to  the  highest  bidder  if  someone  is  willing  to  grossly  overpay  and 
not  take  too  literally  the  meaning  of  the  word  "mint."  I've  also  got  a 
stack  of  early-1970s  Playboy  magazines,  lovingly  collected  and  pre¬ 
served  by  my  late  grandfather-in-law,  bless  his  randy  heart.) 


PAUL 

MCNAMARA 


Concerns  about  privacy,  censorship  and  legislative  med¬ 
dling  generate  an  awful  lot  of  whining  among  the  Internet  cognoscenti 
in  this  country.  And  that's  not  necessarily  a  bad  thing,  considering  how 
easy  it  would  be  for  the  excesses  of  capitalism  and  democracy  to  gum 
up  the  inner  workings  of  the  Web. 

On  the  other  hand,  we  should  not  lose  sight  of  how  lucky  we  are 
to  be  doing  our  Internet  thing  here  in  the  good  ol'  U.S.  of  A. 

Buzz  recently  had  an  opportunity  to  meet  Veni  Markovski,  chair¬ 
man  of  the  Internet  Society  in  Bulgaria,  which  recently  turned  back 
a  government  effort  to  impose  licensing  requirements  on  ISPs. 
Service  providers  haven't  been  quite  so  lucky  in  the  Ukraine,  how¬ 
ever,  where  an  alarming  government  decree  has  just  been  issued, 
according  to  Markovski. 

"They  request  ISPs  to  install  special  equipment  at  their  network 
centers  so  that  the  services  would  have  access  to  the  e-mail  of 
every  Internet  user,"  he  says.  "This  information  comes  as  proof  that 
it  is  very  difficult  to  try  to  build  democracy  and  democratic  institu¬ 
tions  in  ex-communist  countries.  Internet  licensing  exists  only  in 
countries  like  Russia,  China,  Singapore,  Cuba,  and  now,  the 
Ukraine." 


Although  headed  for  two  weeks  of  R&R,  McNamara  will 
still  need  your  help  filling  this  space  upon  his  return.  Send 
Internet  tips  and  gossip  to  him  at  (508)  820-7471  or 
buzz@nww.com. 
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‘TOWN* 

MEETING 


Laying  the  Foundation 
for  Strategic 
Network  Storage 

Attend  this  ££  SEMINAR  and  you'll  be 

two  steps  ahead  of  the  competition  by: 

•  Learning  about  the  stress  that  the  rapid 
growth  in  storage  is  putting  on  your  IT 
staff,  and  why  in  storage,  business  as 
usual  just  won't  cut  it 

•  Finding  out  how  a  storage-centric  plan 
can  boost  your  entire  IT  infrastructure 

•  Discovering  the  key  criteria  -  scalability, 
flexibility,  robustness,  and  manageability 
-that  should  guide  the  storage  decision¬ 
making  process 

•  Learning  what  products  and  services 
are  available  today  to  help  you  build 
a  better  storage  system  for  tomorrow 

•  Quizzing  key  vendor  executives  about 
their  products  features,  and  their  plans 
for  the  future 

•  Figuring  out  which  vendor  is  most  in 
sync  with  your  long-range  storage  needs 


Boston,  October  6 
New  York,  October  7 
Chicago,  October  20 

Washington,  DC,  October  21 
Atlanta,  November  10 
Dallas,  November  11 

Los  Angeles,  December  1 
San  Francisco,  December  2  . 


Registration 


1 . —  1  (800)  643-4668 

www.nwfusion.com/towntneetihg/storage 


PRESENTING  SPONSORS: 


EXHIBITING  SPONSOR: 


<bmc 


Assuring  Business  Availability 


Computer  Network  Technology 


EMC2 

The  Enterprise  Storage  Company 


E3  LEGATO 


SO 


Tfcj 


If  you  are  interested  in  presenting  or  exhibiting  sponsorship  opportunities,  please  contact  Andrea  D’Amato  at  (508)  820-7520  or  adamato@nwvv.com. 


The  SmartSwitch  Router  from  Cabletron 

backbone  solution  delivers  precise  control  of  all  applications  from  the  desktop 
;o  the  WAN.  Prioritize  traffic  through  easy  management  tools.  Enjoy  wire-speed 
aerformance  and  superior  reliability,  all  at  a  reasonable  price. 

•  The  first  switch  router  with  WAN  interfaces  1 

•  The  only  switch  router  to  extend  application  control  to  the  WAN  edge 

•  Full-function,  wire-speed  routing  and  switching 

•  Affordably  priced 

-or  more  information  on  Cabletron’s  backbone  solutions,  call  toll  free  1-877-818-0925 
and  well  send  you  a  free  whitepaper  on  multi-layer  switching.  Or  visit  us  on  the  web  at 
Aww.cabletron.com/backbone.  Cabletron  Systems,  your  ^-business  communications  specialist. 


caBLeTRon 

_ sysiems 


